> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.getsinbad.com/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.getsinbad.com/_mcp/server. # Inspect a webhook delivery GET https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/{webhookId}/deliveries/{deliveryId} Inspect a webhook delivery. **Credential:** Partner secret **Before you call** - A server-side partner secret for the owning partner. Do not send an Origin header. - An active integration that your partner credential permits. Read retained public payload and paginated sanitized attempts Inspect attempts and lastResult. Delivery retries timeouts, network errors, HTTP 408, 429 and 5xx; other failures are final. HTTP 410 disables the endpoint. Up to 12 attempts within 24 hours of the first attempt; Retry-After is honored for 429 and 503. Replay is available for 30 days from capture. Server-only partner credential access: a 403 means the integration is unauthorized or inactive. Mutations share 60/min per partner; test and replay allow 5/min each per endpoint, rotation 1/min per endpoint. Only committed changes count; identical idempotent replays within 24 hours do not. A 429 includes retryAfter. Conflict details.kind can include IDEMPOTENCY_CONFLICT, ENDPOINT_DELETED, ENDPOINT_LIMIT, REVISION_CONFLICT, VERIFICATION_REQUIRED, ROTATION_IN_PROGRESS or REPLAY_UNAVAILABLE. Webhook availability depends on environment readiness; confirm it with Sinbad. > Webhook delivery must be available in the selected environment. Confirm readiness with Sinbad. **Errors** | Status | Code | What to do | | --- | --- | --- | | 400 | `VALIDATION_ERROR` | Correct the fields reported in details before retrying. | | 401 | `UNAUTHENTICATED` | Create a new customer session or use a valid server credential. | | 403 | `FORBIDDEN` | Use a server credential permitted for this active integration. | | 404 | `NOT_FOUND` | Check the resource ID. A resource that belongs to someone else also returns 404. | | 409 | `CONFLICT` | Read the current state again before you prepare or retry. | | 429 | `RATE_LIMITED` | Wait for Retry-After before retrying. | | 503 | `UPSTREAM_ERROR` | Retry with backoff; preserve the same idempotency key for a repeated mutation. | Reference: https://docs.getsinbad.com/api-reference/webhooks/get-webhook-delivery ## Authentication - `Authorization` header (bearer token, required) — Bearer authentication of the form `Bearer `, where token is your auth token. ## Request ### Path parameters - `webhookId` (string, required) - `deliveryId` (string, required) ### Query parameters - `limit` (integer, optional, default: 20) - `cursor` (string, optional) ## Response ### 200 Success - `delivery` (webhooks__Delivery, required) - `payload` (webhooks__RetainedEvent, required) - `payloadUnavailable` (boolean, required) - `attempts` (list of webhooks__Attempt, required) - `nextCursor` (string, required, nullable) ## Errors ### 400 Bad Request Error The request is invalid. - `error` (V1WebhooksWebhookIdDeliveriesDeliveryIdGetResponsesContentApplicationJsonSchemaError, required) ### 401 Unauthorized Error Authentication is required. - `error` (V1WebhooksWebhookIdDeliveriesDeliveryIdGetResponsesContentApplicationJsonSchemaError, required) ### 403 Forbidden Error You do not have permission to perform this action. - `error` (V1WebhooksWebhookIdDeliveriesDeliveryIdGetResponsesContentApplicationJsonSchemaError, required) ### 404 Not Found Error The requested resource was not found. - `error` (V1WebhooksWebhookIdDeliveriesDeliveryIdGetResponsesContentApplicationJsonSchemaError, required) ### 409 Conflict Error The request conflicts with the current state of the resource. - `error` (V1WebhooksWebhookIdDeliveriesDeliveryIdGetResponsesContentApplicationJsonSchemaError, required) ### 429 Too Many Requests Error Too many requests. Please try again later. - `error` (V1WebhooksWebhookIdDeliveriesDeliveryIdGetResponsesContentApplicationJsonSchemaError, required) ### 503 Service Unavailable Error Service temporarily unavailable. - `error` (V1WebhooksWebhookIdDeliveriesDeliveryIdGetResponsesContentApplicationJsonSchemaError, required) ## Types ### webhooks__Delivery - `deliveryId` (string, required) - `eventId` (string, required) - `eventType` (string, required, nullable) - `tradeId` (string, required, nullable) - `kind` (enum, required) - Allowed values: `normal`, `test`, `replay` - `status` (enum, required) - Allowed values: `pending`, `delivering`, `retrying`, `delivered`, `failed`, `canceled` - `attemptCount` (integer, required) - `lastResult` (WebhooksDeliveryLastResult, required, nullable) - `nextAttemptAt` (datetime, required, nullable) - `createdAt` (datetime, required, nullable) - `completedAt` (datetime, required, nullable) - `originalDeliveryId` (string, required, nullable) - `payloadUnavailable` (boolean, required, nullable) ### webhooks__RetainedEvent - `id` (string, required) — Stable event identity across all deliveries and replay. - `type` (enum, required) - Allowed values: `trade.created`, `trade.updated`, `trade.message.created`, `webhook.test` - `apiVersion` (enum, required) - Allowed values: `2026-10-22` - `environment` (string, required) - `partnerId` (string, required) - `integrationId` (string, required) - `partnerUserId` (string, required, nullable) - `tradeId` (string, required, nullable) - `sequence` (integer, required, nullable) — One counter per trade shared by trade.created, trade.updated and trade.message.created. Gaps are normal when subscribing to a subset. Arrival order is not event order; webhook.test has null sequence. - `occurredAt` (datetime, required) - `sourceCommittedAt` (datetime, required) — Trusted business commit/message create time used for endpoint eligibility. - `recordedAt` (datetime, required) - `data` (WebhooksRetainedEventData, required) ### webhooks__Attempt - `attemptId` (string, required) - `number` (integer, required) - `startedAt` (datetime, required, nullable) - `finishedAt` (datetime, required, nullable) - `status` (enum, required) - Allowed values: `delivered`, `retrying`, `failed`, `not_sent`, `outcome_unknown` - `httpStatus` (integer, required, nullable) - `durationMs` (double, required, nullable) - `reason` (string, required, nullable) - `signingKeyIds` (list of string, required) ### V1WebhooksWebhookIdDeliveriesDeliveryIdGetResponsesContentApplicationJsonSchemaError - `code` (string, required) - `numericId` (integer, required) - `message` (string, required) - `requestId` (string, optional) - `details` (map from string to any, optional) ### WebhooksDeliveryLastResult - `reason` (string, optional, nullable) - `httpStatus` (integer, optional, nullable) - `durationMs` (double, optional, nullable) ### WebhooksRetainedEventData - webhooks__TradeData: webhooks__TradeData - webhooks__TradeUpdateData: webhooks__TradeUpdateData - webhooks__MessageData: webhooks__MessageData - webhooks__TestData: webhooks__TestData ### webhooks__TradeData - `trade` (webhooks__TradeSnapshot, required) ### webhooks__TradeUpdateData - `trade` (webhooks__TradeSnapshot, required) - `changedFields` (list of string, required) - `previousStatus` (string, optional) - `proofChange` (WebhooksTradeUpdateDataProofChange, optional) ### webhooks__MessageData - `message` (webhooks__MessageSnapshot, required) ### webhooks__TestData - `challenge` (string, required) ### webhooks__TradeSnapshot - `tradeId` (string, required) - `transferNumber` (string, required, nullable) - `tradeRef` (string, required, nullable) - `side` (enum, required) - Allowed values: `BUY`, `SELL` - `tokenAddress` (string, required, nullable) - `escrowAddress` (string, required, nullable) - `escrowId` (string, required, nullable) - `transactionHash` (string, required, nullable) - `settlementTransactionHash` (string, required, nullable) - `disputeTransactionHash` (string, required, nullable) - `settlementOutcome` (string, required, nullable) - `fiatCurrencyId` (string, required, nullable) - `paymentMethodId` (string, required, nullable) - `status` (enum, required) - Allowed values: `PENDING`, `FUNDING_FAILED`, `FUNDING_EXPIRED`, `CREATED`, `PAID`, `RELEASED`, `CANCELED`, `DISPUTED` - `chainId` (integer, required, nullable) - `createdAt` (datetime, required, nullable) - `fundedAt` (datetime, required, nullable) - `paidAt` (datetime, required, nullable) - `releasedAt` (datetime, required, nullable) - `canceledAt` (datetime, required, nullable) - `disputedAt` (datetime, required, nullable) - `resolvedAt` (datetime, required, nullable) - `fundingExpiresAt` (datetime, required, nullable) - `pricing` (WebhooksTradeSnapshotPricing, required) — Human token and fiat amounts are decimal strings, never atomic units or JSON floats. USDT fields use token display units; fiat fields use the trade fiatCurrencyId. - `proofOfPayment` (WebhooksTradeSnapshotProofOfPayment, required) - `dispute` (trades__Dispute, optional) — Confirmed dispute only; null before opening and retained after resolution. Roles are public; no internal identity IDs are exposed. - `displayLabel` (string, optional, nullable) — Recipient account label from the funded payment snapshot; null before funding or when unavailable. Retained after settlement. Optional for historical events; account data is excluded. ### WebhooksTradeUpdateDataProofChange - `operation` (enum, required) - Allowed values: `added`, `replaced`, `removed` - `previousProofId` (string, required, nullable) - `proofId` (string, required, nullable) ### webhooks__MessageSnapshot - `messageId` (string, required) - `authorRole` (enum, required) - Allowed values: `customer`, `merchant` - `type` (enum, required) - Allowed values: `text`, `image`, `file` - `text` (string, required) - `createdAt` (datetime, required, nullable) - `proofId` (string, required, nullable) - `attachment` (WebhooksMessageSnapshotAttachment, required, nullable) ### WebhooksTradeSnapshotPricing Human token and fiat amounts are decimal strings, never atomic units or JSON floats. USDT fields use token display units; fiat fields use the trade fiatCurrencyId. - `usdtAmount` (string, required, nullable) - `customerFiatAmount` (string, required, nullable) - `subtotalFiat` (string, required, nullable) - `makerFeeUsdt` (string, required, nullable) - `platformFeeUsdt` (string, required, nullable) - `partnerFeeUsdt` (string, required, nullable) - `lockAmountUsdt` (string, required, nullable) - `recipientAmountUsdt` (string, required, nullable) ### WebhooksTradeSnapshotProofOfPayment - webhooks__Proof: webhooks__Proof - map from string to any ### trades__Dispute Confirmed dispute only; null before opening and retained after resolution. Roles are public; no internal identity IDs are exposed. - `reason` (string, required, nullable) — Optional off-chain reason associated with the confirmed dispute; null when unavailable or ambiguous. - `openedByRole` (enum, required) - Allowed values: `merchant`, `customer` - `openedAtStatus` (enum, required, nullable) - Allowed values: `CREATED`, `PAID` - `openedAt` (datetime, required, nullable) - `transactionHash` (string, required, nullable) - `resolvedAt` (datetime, required, nullable) - `resolution` (enum, required, nullable) - Allowed values: `BUYER_RELEASE`, `FULL_REFUND` ### WebhooksMessageSnapshotAttachment - `kind` (enum, required) - Allowed values: `image`, `file` - `contentType` (string, required, nullable) - `size` (integer, required, nullable) - `metadataStatus` (enum, required) - Allowed values: `available`, `unavailable` ### webhooks__Proof - `proofId` (string, required, nullable) - `uploadedByRole` (enum, required, nullable) - Allowed values: `customer`, `merchant` - `uploadedAt` (datetime, required, nullable) - `contentType` (string, required, nullable) - `size` (integer, required, nullable) ## Examples ### Retained event and attempts **Response** ```json { "delivery": { "deliveryId": "del_demo", "eventId": "evt_demo", "eventType": "trade.updated", "tradeId": "trade_demo", "kind": "normal", "status": "failed", "attemptCount": 1, "lastResult": { "reason": "HTTP_400", "httpStatus": 400, "durationMs": 125 }, "nextAttemptAt": null, "createdAt": "2026-10-23T10:00:00.000Z", "completedAt": "2026-10-23T10:00:00.000Z", "originalDeliveryId": null, "payloadUnavailable": false }, "payload": { "id": "evt_demo", "type": "trade.updated", "apiVersion": "2026-10-22", "environment": "sinbad-staging-env", "partnerId": "partner_demo", "integrationId": "integration_demo", "partnerUserId": "customer_demo", "tradeId": "trade_demo", "sequence": 3, "occurredAt": "2026-10-23T10:00:00.000Z", "sourceCommittedAt": "2026-10-23T10:00:00.000Z", "recordedAt": "2026-10-23T10:00:00.000Z", "data": { "changedFields": [ "status", "paidAt" ], "previousStatus": "CREATED", "trade": { "canceledAt": null, "chainId": 80002, "createdAt": "2026-10-23T10:00:00.000Z", "displayLabel": "Bank transfer", "disputeTransactionHash": null, "disputedAt": null, "escrowAddress": "0x3333333333333333333333333333333333333333", "escrowId": "42", "fiatCurrencyId": "usd", "fundedAt": "2026-10-23T10:00:00.000Z", "fundingExpiresAt": null, "paidAt": "2026-10-23T10:00:00.000Z", "paymentMethodId": "bank_transfer", "pricing": { "customerFiatAmount": "100", "lockAmountUsdt": "100", "makerFeeUsdt": "0", "partnerFeeUsdt": "0", "platformFeeUsdt": "0", "recipientAmountUsdt": "100", "subtotalFiat": "100", "usdtAmount": "100" }, "proofOfPayment": null, "releasedAt": null, "resolvedAt": null, "settlementOutcome": null, "settlementTransactionHash": null, "side": "BUY", "status": "PAID", "tokenAddress": "0x4444444444444444444444444444444444444444", "tradeId": "trade_demo", "tradeRef": "0xabababababababababababababababababababababababababababababababab", "transactionHash": "0xabababababababababababababababababababababababababababababababab", "transferNumber": "B2B-DEMO" } } }, "payloadUnavailable": false, "attempts": [ { "attemptId": "attempt_demo", "number": 1, "startedAt": "2026-10-23T10:00:00.000Z", "finishedAt": "2026-10-23T10:00:00.000Z", "status": "failed", "httpStatus": 400, "durationMs": 25, "reason": "HTTP_400", "signingKeyIds": [ "key_demo" ] } ], "nextCursor": null } ``` **SDK Code** ```python Retained event and attempts import requests url = "https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo" headers = {"Authorization": "Bearer "} response = requests.get(url, headers=headers) print(response.json()) ``` ```javascript Retained event and attempts const url = 'https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo'; const options = {method: 'GET', headers: {Authorization: 'Bearer '}}; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go Retained event and attempts package main import ( "fmt" "net/http" "io" ) func main() { url := "https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo" req, _ := http.NewRequest("GET", url, nil) req.Header.Add("Authorization", "Bearer ") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby Retained event and attempts require 'uri' require 'net/http' url = URI("https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Get.new(url) request["Authorization"] = 'Bearer ' response = http.request(request) puts response.read_body ``` ```java Retained event and attempts import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.get("https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo") .header("Authorization", "Bearer ") .asString(); ``` ```php Retained event and attempts request('GET', 'https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo', [ 'headers' => [ 'Authorization' => 'Bearer ', ], ]); echo $response->getBody(); ``` ```csharp Retained event and attempts using RestSharp; var client = new RestClient("https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo"); var request = new RestRequest(Method.GET); request.AddHeader("Authorization", "Bearer "); IRestResponse response = client.Execute(request); ``` ```swift Retained event and attempts import Foundation let headers = ["Authorization": "Bearer "] let request = NSMutableURLRequest(url: NSURL(string: "https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "GET" request.allHTTPHeaderFields = headers let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ``` ### Payload unavailable after cleanup **Response** ```json { "delivery": { "deliveryId": "del_demo", "eventId": "evt_demo", "eventType": "trade.updated", "tradeId": "trade_demo", "kind": "normal", "status": "failed", "attemptCount": 1, "lastResult": { "reason": "HTTP_400", "httpStatus": 400, "durationMs": 125 }, "nextAttemptAt": null, "createdAt": "2026-10-23T10:00:00.000Z", "completedAt": "2026-10-23T10:00:00.000Z", "originalDeliveryId": null, "payloadUnavailable": true }, "payload": null, "payloadUnavailable": true, "attempts": [ { "attemptId": "attempt_demo", "number": 1, "startedAt": "2026-10-23T10:00:00.000Z", "finishedAt": "2026-10-23T10:00:00.000Z", "status": "failed", "httpStatus": 400, "durationMs": 25, "reason": "HTTP_400", "signingKeyIds": [ "key_demo" ] } ], "nextCursor": null } ``` **SDK Code** ```python Payload unavailable after cleanup import requests url = "https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo" headers = {"Authorization": "Bearer "} response = requests.get(url, headers=headers) print(response.json()) ``` ```javascript Payload unavailable after cleanup const url = 'https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo'; const options = {method: 'GET', headers: {Authorization: 'Bearer '}}; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go Payload unavailable after cleanup package main import ( "fmt" "net/http" "io" ) func main() { url := "https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo" req, _ := http.NewRequest("GET", url, nil) req.Header.Add("Authorization", "Bearer ") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby Payload unavailable after cleanup require 'uri' require 'net/http' url = URI("https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Get.new(url) request["Authorization"] = 'Bearer ' response = http.request(request) puts response.read_body ``` ```java Payload unavailable after cleanup import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.get("https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo") .header("Authorization", "Bearer ") .asString(); ``` ```php Payload unavailable after cleanup request('GET', 'https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo', [ 'headers' => [ 'Authorization' => 'Bearer ', ], ]); echo $response->getBody(); ``` ```csharp Payload unavailable after cleanup using RestSharp; var client = new RestClient("https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo"); var request = new RestRequest(Method.GET); request.AddHeader("Authorization", "Bearer "); IRestResponse response = client.Execute(request); ``` ```swift Payload unavailable after cleanup import Foundation let headers = ["Authorization": "Bearer "] let request = NSMutableURLRequest(url: NSURL(string: "https://us-central1-sinbad-staging-env.cloudfunctions.net/b2b-v1/v1/webhooks/wh_demo/deliveries/del_demo")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "GET" request.allHTTPHeaderFields = headers let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```