curl --request GET \
--url https://api.citadel.example/api/v1/webhook_deliveries \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.citadel.example/api/v1/webhook_deliveries', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.citadel.example/api/v1/webhook_deliveries"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.citadel.example/api/v1/webhook_deliveries"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}{
"data": [
{
"id": "0199a3c5-0000-7000-8000-000000000001",
"type": "operation.confirmed",
"resource": {
"type": "operation",
"id": "0199a3c4-8a00-7c22-8d3e-4f5a6b7c8d9e"
},
"data": {
"operation_id": "0199a3c4-8a00-7c22-8d3e-4f5a6b7c8d9e",
"kind": "transfer",
"status": "confirmed",
"chain_ref": "9f1c2e…"
},
"endpoint": {
"id": "0199a2f0-1b00-7a11-8c22-3d4e5f6a7b8c",
"url": "https://merchant.example/hooks/citadel"
},
"status": "failed",
"attempts": 11,
"next_attempt_at": null,
"delivered_at": null,
"last_response_code": 502,
"last_error": "exhausted after 11 attempts (last HTTP 502)",
"created_at": "2026-10-08T12:30:00Z"
}
],
"next_cursor": null
}List webhook deliveries
What Citadel posted, or still tries to post, to your webhook endpoints, newest first: one
row per event and endpoint, with its attempts and the endpoint’s last answer. id, type,
resource and data are the body the endpoint receives, without the per-attempt
timestamp, so a row you missed can go through your webhook handler, deduplicated on id.
Takes no network: an endpoint hears every network. A paused or disabled endpoint gets no
deliveries: an event that happened meanwhile has no row here — read it from
GET /transfers or GET /transactions.
Paged with a cursor — see Lists and pagination. Needs the read scope. A key limited to
vaults is refused with 403 vault_limited: an endpoint serves every vault.
curl --request GET \
--url https://api.citadel.example/api/v1/webhook_deliveries \
--header 'Authorization: Bearer <token>'const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.citadel.example/api/v1/webhook_deliveries', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.citadel.example/api/v1/webhook_deliveries"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.citadel.example/api/v1/webhook_deliveries"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}{
"data": [
{
"id": "0199a3c5-0000-7000-8000-000000000001",
"type": "operation.confirmed",
"resource": {
"type": "operation",
"id": "0199a3c4-8a00-7c22-8d3e-4f5a6b7c8d9e"
},
"data": {
"operation_id": "0199a3c4-8a00-7c22-8d3e-4f5a6b7c8d9e",
"kind": "transfer",
"status": "confirmed",
"chain_ref": "9f1c2e…"
},
"endpoint": {
"id": "0199a2f0-1b00-7a11-8c22-3d4e5f6a7b8c",
"url": "https://merchant.example/hooks/citadel"
},
"status": "failed",
"attempts": 11,
"next_attempt_at": null,
"delivered_at": null,
"last_response_code": 502,
"last_error": "exhausted after 11 attempts (last HTTP 502)",
"created_at": "2026-10-08T12:30:00Z"
}
],
"next_cursor": null
}Authorizations
An API key minted in the console (ctd_…). Authenticates; never authorizes funds. A key
carries scopes (read, wallets.write, transactions.write, events.write,
webhooks.write, policy.write) and may be limited to vaults, to IP addresses, and in
lifetime — see Authentication.
Query Parameters
One event type, or several separated by commas (operation.failed,operation.expired).
test.ping is a test delivery (POST /webhook_endpoints/{id}/test, or the console's
test button). An unknown type answers 422.
"operation.confirmed"
One status, or several separated by commas (failed,pending).
"failed"
Only the deliveries to this endpoint — the endpoint.id of a row. Not an id, 422.
Only rows Citadel recorded at this time or later (created_at). An ISO 8601 date-time.
Only rows Citadel recorded before this time (created_at). An ISO 8601 date-time.
Rows per page, 1 to 100. Out of range, 422.
1 <= x <= 100The next_cursor of the page before; absent for the first page. Send the same filters
with it. A cursor this API did not issue answers 422 invalid_cursor.