Account

Consumer's signed government filing receipts for the dashboard

Returns the signed-in consumer's signed submission receipts (one per binding government action filed via /v1/actions/execute), newest first, keyset-paginated. Session-cookie auth (NOT Bearer, no scope). METADATA ONLY — the verbatim government payload and the raw HMAC signature are excluded. Owner is the audit_log row referenced by receipts.audit_log_id; cross-tenant filtering is the embedded audit_log.consumer_id predicate (mirrors the database migration RLS policy), read via the service-role client for the same reason as the audit surface. Most consumers have zero receipts (live execute is feature-gated) — the empty page is the common case, never an error. Conditional GET supported; Cache-Control private.

get/api/v1/account/receipts

Request

  • Base URL: https://www.apier.no
  • URL: https://www.apier.no/api/v1/account/receipts
  • Auth: API key in cookie sb-access-token

Query parameters

limitinteger

Page size. Defaults to 25; max 100. limit+1 lookahead computes has_more without a COUNT.

cursorstring

Opaque HMAC-signed continuation token - the CANONICAL pagination idiom. Pass the previous response's pagination.next_cursor back verbatim; a tampered or cross-endpoint cursor is rejected with 400 CURSOR_INVALID. Cannot be combined with the legacy before/before_id tuple.

beforestring date-time

Keyset cursor — pass pagination.next_before (the created_at of the last row) from the previous response. Required together with before_id; supplying one without the other 400s. DEPRECATED: use the opaque cursor parameter instead; this parameter keeps working through the deprecation window (Sunset: 2027-01-31T00:00:00Z) and responses to requests using it carry Deprecation/Sunset/Link headers.

before_idstring uuid

Keyset cursor companion — pass pagination.next_before_id. The id tiebreak makes rows sharing a created_at page deterministically. DEPRECATED: use the opaque cursor parameter instead; this parameter keeps working through the deprecation window (Sunset: 2027-01-31T00:00:00Z) and responses to requests using it carry Deprecation/Sunset/Link headers.

Headers

If-None-Matchstring

Strong ETag from a prior GET of this resource. When it matches the current state the server returns 304 Not Modified with an empty body, saving the payload.

Response

A page of the consumer's signed filing receipts, newest first. Empty data array when the consumer has filed nothing yet (NEVER 404).

successtrue required

Example response

{
  "data": {
    "data": [
      {
        "org_number": "999999999"
      }
    ]
  },
  "_meta": {
    "rulebook_version": "v1.0.0",
    "source": "apier.no",
    "data_source": "Brønnøysund Enhetsregisteret + Apier Universal Rulebook",
    "schema_version": "1.0.0",
    "legal_basis": "NLOD — public registry reuse",
    "response_timestamp": "2026-04-24T12:00:00.000Z",
    "response_hash": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
    "source_snapshot_id": "brreg-2026-04-24T02:00:00.000Z",
    "cost_nok": 0.5,
    "wallet_remaining_nok": 9.5,
    "spend_cap_remaining_nok": 12.5
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.