GET/api/v1/inbound-deliveries
List deliveries made to the org
The receiver's view: what other orgs delivered to yours through a supply link, newest first, with where each landed in your org. For an OAuth token, its person needs the read-delivery permission (no platform-admin bypass); a key reads the whole org. 404 when the org does not have delivery, and for an OAuth token whose person may not read it. Also 404 when the org does not have supply links.
Scopes: delivery:read
Parameters
statusquery · "pending" | "delivered" | "failed" | "rejected"Only deliveries with this status.
created_afterquery · string (date-time)Only deliveries created strictly after this instant (ISO 8601 with offset), compared to the millisecond.
limitquery · integerPage size, default 50. Values above 100 are treated as 100.
cursorquery · stringnext_cursor from the previous page, with the other parameters unchanged.
Response 200InboundDeliveryList
dataarray of InboundDeliveryrequiredNewest first (by
created_at, then id).idstring (uuid)requiredsupplier_orgobjectrequiredThe org that delivered.
idstring (uuid)requirednamestringrequired
asset_namestring or nullrequiredThe supplier's asset name.
spec_profileSpecProfileRef or nullrequiredYour spec revision it was delivered against.
idstring (uuid)requirednamestringrequiredrevisionintegerrequiredThe spec's revision: a published spec changes only by a new revision, which supersedes this one.
status"pending" | "delivered" | "failed" | "rejected"requiredreceivedobject or nullrequiredWhere the delivery landed in your org; null until it has.
asset_idstring (uuid) or nullrequiredYour asset the delivery landed as (GET /api/v1/assets/{id}).
file_idstring (uuid) or nullrequiredThe landed primary file.
sha256string or nullrequiredThe landed primary file's SHA-256 (lowercase hex).
landed_atstring or nullrequiredWhen it landed (ISO 8601).
redeliverybooleanrequiredTrue when it landed as a new version of an asset an earlier delivery landed.
rejection_notestring or nullrequiredWhy you rejected it, when you did.
errorstring or nullrequiredcreated_atstring (date-time)requireddelivered_atstring (date-time) or nullrequired
next_cursorstring or nullrequiredPass as
cursorto get the next page; null means this is the last page.
Other responses
- 401 unauthenticated — no key, or an unknown, revoked or expired one.
- 403 insufficient-scope — the key lacks a required scope.
- 404 not-found.
- 422 validation — a bad filter,
limitorcursor(errors[].pathnames it). - 429 rate-limited — the key's request budget is spent; wait Retry-After seconds.
- 500 internal.