---
title: "Get one webhook delivery log"
method: GET
path: "/api/webhook-logs/{id}"
tags: ["merchant"]
---

# Get one webhook delivery log

`GET /api/webhook-logs/{id}`

## Request

- Base URL: `https://api.depixapp.com`
- URL: `https://api.depixapp.com/api/webhook-logs/{id}`
- Auth: HTTP bearer

Full detail of one delivery attempt, including the signed request payload sent and the response body received. Ownership enforced: another account's log answers 404. Requires scope `merchant_read` on the API-key path.

## Path parameters

- `id` string, required

## Response `200`

Full delivery detail.

- WebhookLogDetailResponse: Full detail of one delivery attempt, including the signed request body sent and the response body received.
  - `log` object, required: One delivery attempt (full view).
    - `id` string, required: Delivery log id.
    - `checkout_id` string, nullable, required: Checkout id (chk_*) for checkout.* events; null for deposit.*/withdraw.* events.
    - `merchant_id` string, nullable, required: Owning merchant id for deposit.*/withdraw.* events; null for checkout.* events (owned via the checkout).
    - `url` string, required: The callback URL the event was delivered to.
    - `event` string, required: Event name delivered.
    - `status_code` integer, nullable, required: HTTP status answered by the receiver — null when the request failed before a response.
    - `request_body` string, nullable, required: The JSON payload sent (as a string) — the same bytes the X-DePix-Signature covers.
    - `response_body` string, nullable, required: Receiver's response body (as a string, may be truncated), or null.
    - `error` string, nullable, required: Transport/delivery error message, or null.
    - `attempt` integer, required: 1-based attempt number within the retry schedule (max 6).
    - `next_retry_at` string, nullable, required: When the next retry is scheduled (RFC 3339 UTC), or null when delivery succeeded or the schedule is exhausted.
    - `sent_at` string, required: Delivery attempt timestamp (RFC 3339 UTC).

## Other responses

- `401`: Missing/invalid credentials. `invalid_api_key` for a failed sk_* lookup (revoked/expired/unknown); `invalid_token` for a bad or missing JWT/Authorization header.
- `403`: The API key lacks `merchant_read`, or the account has no active merchant profile.
- `404`: Log not found — includes rows owned by another account (ownership is never disclosed).
- `429`: Rate limited. Beyond the endpoint's own limit when set (`rate_limited`), API-key calls are also bounded by the shared per-merchant budget (`merchant_rate_limited`, default 30 req/min across all endpoints) and by the key's own rate limit when configured (`rate_limited`). Retry after `retry_after` seconds (also in the Retry-After header).

---

[API](https://skmtc.dev/depixapp/apis/depix-api.md) · [All operations](https://skmtc.dev/depixapp/apis/depix-api/llms.txt) · [OpenAPI document](https://skmtc.dev/depixapp/apis/depix-api/revisions/04094536dd0f?raw)