List your signed delegation receipts — proof of fullmakt lifecycle events
Consumer-scoped, keyset-paginated list of the SIGNED DELEGATION RECEIPTS the fullmakt routes emitted for YOUR consumer — the retrieval surface for cryptographic proof of fullmakt lifecycle events (delegation_granted from POST /v1/fullmakt/request, delegation_revoked from POST /v1/fullmakt/revoke). Use it when the original 201/200 response is gone: each entry's receipt object is the COMPLETE signed payload (every signed field plus the HMAC-SHA256-v1 signature) — verifiable by Apier (the HMAC secret never leaves the server; the receipt is Apier's attestation, not an offline consumer-verifiable signature). Nothing here widens disclosure — every listed field was already returned to this same consumer on the emitting response, and the HMAC secret never leaves the server, so returning the signature discloses nothing. Cross-tenant isolation is structural: only receipts whose consumer_id matches the authenticated API key's consumer are ever listed. Newest first; pass pagination.next_before and pagination.next_before_id back as ?before= and ?before_id= (a tuple — both or neither) for the next page. Supports conditional GET: every 200 carries a strong SHA-256 ETag (with Cache-Control: private, max-age=60 and Vary: Authorization), and a request whose If-None-Match matches returns 304 Not Modified with no body.
Request
- Base URL: https://www.apier.no
- URL: https://www.apier.no/api/v1/fullmakt/receipts
- Auth: HTTP bearer
Query parameters
Page size (1–100, default 25). The reader fetches limit+1 rows to compute has_more without a count query.
Opaque HMAC-signed continuation token - the CANONICAL pagination idiom. Pass the previous response's pagination.next_cursor back verbatim; a tampered or cross-endpoint cursor is rejected with 400 CURSOR_INVALID. Cannot be combined with the legacy before/before_id tuple.
Keyset cursor timestamp — the created_at of the last entry of the previous page (echoed as pagination.next_before). Must be supplied together with before_id; supplying only one returns 400 VALIDATION_FAILED. DEPRECATED: use the opaque cursor parameter instead; this parameter keeps working through the deprecation window (Sunset: 2027-01-31T00:00:00Z) and responses to requests using it carry Deprecation/Sunset/Link headers.
Keyset cursor tiebreak — the row id of the last entry of the previous page (echoed as pagination.next_before_id). Must be supplied together with before. DEPRECATED: use the opaque cursor parameter instead; this parameter keeps working through the deprecation window (Sunset: 2027-01-31T00:00:00Z) and responses to requests using it carry Deprecation/Sunset/Link headers.
Headers
Conditional-GET revalidation: send the ETag value from a previous 200. On a match the endpoint returns 304 Not Modified with no body, saving the transfer while the receipt list is unchanged.
Response
The caller's delegation receipts, newest first. An empty data.receipts is a valid state (no fullmakt lifecycle events recorded yet), never an error.
Example response
{
"data": {
"receipts": [
{
"receipt": {
"signature": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
}
}
]
},
"_meta": {
"rulebook_version": "v1.0.0",
"source": "apier.no",
"data_source": "Brønnøysund Enhetsregisteret + Apier Universal Rulebook",
"schema_version": "1.0.0",
"legal_basis": "NLOD — public registry reuse",
"response_timestamp": "2026-04-24T12:00:00.000Z",
"response_hash": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
"source_snapshot_id": "brreg-2026-04-24T02:00:00.000Z",
"cost_nok": 0.5,
"wallet_remaining_nok": 9.5,
"spend_cap_remaining_nok": 12.5
}
}Changes
No recorded changes to this operation across all 1 revision of this API.