---
title: "List webhook delivery logs"
method: GET
path: "/api/webhook-logs"
tags: ["merchant"]
---

# List webhook delivery logs

`GET /api/webhook-logs`

## Request

- Base URL: `https://api.depixapp.com`
- URL: `https://api.depixapp.com/api/webhook-logs`
- Auth: HTTP bearer

The 50 most recent delivery attempts of checkout.*, deposit.* and withdraw.* events to this account's callback URLs, newest first — the audit of what was delivered, retried or failed. Bodies are omitted in the list; fetch one log by id for the payloads. Requires scope `merchant_read` on the API-key path. (An agent account uses the keypair-signed twin at GET /api/agents/webhook-logs.)

## Response `200`

Delivery attempts, newest first.

- WebhookLogListResponse: The 50 most recent webhook delivery attempts for this account, newest first. Bodies are omitted here — fetch one log by id for the request/response payloads.
  - `logs` object[], required: Delivery attempts, newest first (fixed window of 50).
    - `id` string, required: Delivery log id — use it on the detail endpoint.
    - `checkout_id` string, nullable, required: Checkout id (chk_*) for checkout.* events; null for deposit.*/withdraw.* events.
    - `event` string, required: Event name delivered (e.g. checkout.completed, deposit.depix_sent, withdraw.sent).
    - `url` string, required: The callback URL the event was delivered to.
    - `status_code` integer, nullable, required: HTTP status answered by the receiver — null when the request failed before a response (timeout, connection error).
    - `error` string, nullable, required: Transport/delivery error message, or null when a response was received.
    - `attempt` integer, required: 1-based attempt number within the retry schedule (max 6).
    - `sent_at` string, required: Delivery attempt timestamp (RFC 3339 UTC).

## Other responses

- `401`: Missing/invalid credentials. `invalid_api_key` for a failed sk_* lookup (revoked/expired/unknown); `invalid_token` for a bad or missing JWT/Authorization header.
- `403`: The API key lacks `merchant_read`, or the account has no active merchant profile.
- `429`: Rate limited. Beyond the endpoint's own limit when set (`rate_limited`), API-key calls are also bounded by the shared per-merchant budget (`merchant_rate_limited`, default 30 req/min across all endpoints) and by the key's own rate limit when configured (`rate_limited`). Retry after `retry_after` seconds (also in the Retry-After header).

---

[API](https://skmtc.dev/depixapp/apis/depix-api.md) · [All operations](https://skmtc.dev/depixapp/apis/depix-api/llms.txt) · [OpenAPI document](https://skmtc.dev/depixapp/apis/depix-api/revisions/04094536dd0f?raw)