Get Webhook Logs

curl --request GET \
  --url https://secureapi.tender.cash/v1/api/webhook/logs \
  --header 'authorization: <api-key>' \
  --header 'x-access-id: <x-access-id>' \
  --header 'x-request-id: <x-request-id>' \
  --header 'x-timestamp: <x-timestamp>'

const options = {
  method: 'GET',
  headers: {
    authorization: '<api-key>',
    'x-timestamp': '<x-timestamp>',
    'x-request-id': '<x-request-id>',
    'x-access-id': '<x-access-id>'
  }
};

fetch('https://secureapi.tender.cash/v1/api/webhook/logs', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://secureapi.tender.cash/v1/api/webhook/logs"

headers = {
    "authorization": "<api-key>",
    "x-timestamp": "<x-timestamp>",
    "x-request-id": "<x-request-id>",
    "x-access-id": "<x-access-id>"
}

response = requests.get(url, headers=headers)

print(response.text)

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://secureapi.tender.cash/v1/api/webhook/logs",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "authorization: <api-key>",
    "x-access-id: <x-access-id>",
    "x-request-id: <x-request-id>",
    "x-timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

{
  "status": "success",
  "message": "Webhook logs fetched",
  "data": {
    "webhookLogs": [
      {
        "_id": "691069ff947a702cfad9e862",
        "merchantId": "6538e8f9bdec6d1a21978a64",
        "webhookId": "691069ff947a702cfad9e861",
        "eventId": "6f2e9d14-8c3b-4a57-b0e1-9d4c2a7f5e31",
        "event": "transaction_cancelled",
        "requestBody": {
          "eventId": "6f2e9d14-8c3b-4a57-b0e1-9d4c2a7f5e31",
          "event": "transaction_cancelled",
          "data": {
            "txId": "66aec7de809b7f45c42a49f9",
            "status": "cancelled",
            "referenceId": "order-123",
            "amount": "10.15",
            "usdAmount": "10.15",
            "chain": "ethereum",
            "walletAddress": "0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb1",
            "cancelledAt": "2026-10-15T09:00:00.000Z"
          }
        },
        "responseBody": { "received": true },
        "status": "success",
        "error": "success",
        "createdAt": "2026-10-15T09:00:01.204Z",
        "updatedAt": "2026-10-15T09:00:01.204Z"
      }
    ],
    "total": 42,
    "totalPages": 5
  }
}

GET

api

webhook

logs

Get Webhook Logs

curl --request GET \
  --url https://secureapi.tender.cash/v1/api/webhook/logs \
  --header 'authorization: <api-key>' \
  --header 'x-access-id: <x-access-id>' \
  --header 'x-request-id: <x-request-id>' \
  --header 'x-timestamp: <x-timestamp>'

const options = {
  method: 'GET',
  headers: {
    authorization: '<api-key>',
    'x-timestamp': '<x-timestamp>',
    'x-request-id': '<x-request-id>',
    'x-access-id': '<x-access-id>'
  }
};

fetch('https://secureapi.tender.cash/v1/api/webhook/logs', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://secureapi.tender.cash/v1/api/webhook/logs"

headers = {
    "authorization": "<api-key>",
    "x-timestamp": "<x-timestamp>",
    "x-request-id": "<x-request-id>",
    "x-access-id": "<x-access-id>"
}

response = requests.get(url, headers=headers)

print(response.text)

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://secureapi.tender.cash/v1/api/webhook/logs",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "authorization: <api-key>",
    "x-access-id: <x-access-id>",
    "x-request-id: <x-request-id>",
    "x-timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

{
  "status": "success",
  "message": "Webhook logs fetched",
  "data": {
    "webhookLogs": [
      {
        "_id": "691069ff947a702cfad9e862",
        "merchantId": "6538e8f9bdec6d1a21978a64",
        "webhookId": "691069ff947a702cfad9e861",
        "eventId": "6f2e9d14-8c3b-4a57-b0e1-9d4c2a7f5e31",
        "event": "transaction_cancelled",
        "requestBody": {
          "eventId": "6f2e9d14-8c3b-4a57-b0e1-9d4c2a7f5e31",
          "event": "transaction_cancelled",
          "data": {
            "txId": "66aec7de809b7f45c42a49f9",
            "status": "cancelled",
            "referenceId": "order-123",
            "amount": "10.15",
            "usdAmount": "10.15",
            "chain": "ethereum",
            "walletAddress": "0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb1",
            "cancelledAt": "2026-10-15T09:00:00.000Z"
          }
        },
        "responseBody": { "received": true },
        "status": "success",
        "error": "success",
        "createdAt": "2026-10-15T09:00:01.204Z",
        "updatedAt": "2026-10-15T09:00:01.204Z"
      }
    ],
    "total": 42,
    "totalPages": 5
  }
}

Auth method: Signed (HMAC) — this endpoint requires the full set of signed headers: x-access-id, x-request-id, x-timestamp, and an HMAC-SHA256 authorization signature. See Authentication.

Rate limit: 120 requests per minute for all webhook endpoints. See Rate limits.

Headers

string

required

Base64-encoded HMAC-SHA256 signature of {"timeStamp":"<x-timestamp>","requestId":"<x-request-id>","accessId":"<x-access-id>"}, signed with your access secret. The request body is not part of the signature.Example: "pV3n0o8kq0lK2mJ8bZ1yq3Yt6hR0cXK9u4mVJ2l9sE0="

string

required

ISO 8601 timestamp; must be within 5 minutes of server timeExample: "2026-10-15T09:45:53.000Z"

string

required

A unique UUID v4 per requestExample: "550e8400-e29b-41d4-a716-446655440000"

string

required

Your API access ID provided by TenderExample: "your-access-id-here"

Every delivery attempt is logged, whether it succeeded or failed. Tender doesn’t retry failed deliveries, so use these logs to find events your endpoint missed. See Webhooks.

Query Parameters

integer

default:"1"

Page number, starting at 1Example: 1

integer

default:"10"

Number of log entries per pageExample: 10

Logs are not sorted by date. To find the most recent deliveries, request the last page (totalPages).

Response

Returns HTTP 202.

string

required

Always "success"

string

required

Example: "Webhook logs fetched"

object

required

Show data properties

object[]

Log entries for this page. Additional fields may be present; ignore fields you don’t recognise.

Show log entry

string

ID of the log entryExample: "691069ff947a702cfad9e862"

string

Event nameExample: "transaction_completed"

string

The eventId sent in this deliveryExample: "b3c1f7a2-5d4e-4f8a-9c2b-6e1d0a7f3b94"

string

ID of the webhook the event was sent toExample: "691069ff947a702cfad9e861"

string

Your merchant IDExample: "6538e8f9bdec6d1a21978a64"

object

The full body that was sent: { eventId, event, data }

object | string | null

The body your endpoint returned, if any. If it was a JSON object with a data field, only data is stored.

string

success (your endpoint returned 2xx) or failedExample: "success"

string

For failed deliveries, the reason: the message field of your endpoint’s error response if it had one, otherwise an error such as "timeout of 15000ms exceeded" or "Request failed with status code 500". For successful deliveries, "success".Example: "success"

string

ISO 8601 timestamp of the delivery attemptExample: "2026-10-15T09:04:13.120Z"

integer

Total number of log entriesExample: 42

integer

Total number of pages for the given limitExample: 5

{
  "status": "success",
  "message": "Webhook logs fetched",
  "data": {
    "webhookLogs": [
      {
        "_id": "691069ff947a702cfad9e862",
        "merchantId": "6538e8f9bdec6d1a21978a64",
        "webhookId": "691069ff947a702cfad9e861",
        "eventId": "6f2e9d14-8c3b-4a57-b0e1-9d4c2a7f5e31",
        "event": "transaction_cancelled",
        "requestBody": {
          "eventId": "6f2e9d14-8c3b-4a57-b0e1-9d4c2a7f5e31",
          "event": "transaction_cancelled",
          "data": {
            "txId": "66aec7de809b7f45c42a49f9",
            "status": "cancelled",
            "referenceId": "order-123",
            "amount": "10.15",
            "usdAmount": "10.15",
            "chain": "ethereum",
            "walletAddress": "0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb1",
            "cancelledAt": "2026-10-15T09:00:00.000Z"
          }
        },
        "responseBody": { "received": true },
        "status": "success",
        "error": "success",
        "createdAt": "2026-10-15T09:00:01.204Z",
        "updatedAt": "2026-10-15T09:00:01.204Z"
      }
    ],
    "total": 42,
    "totalPages": 5
  }
}

Authorizations

authorization

string

header

required

Signed (HMAC) authentication. Required headers: x-access-id, x-request-id (UUID v4), x-timestamp (ISO 8601, must be within 5 minutes of server time), and authorization: the Base64 HMAC-SHA256 of the JSON string {"timeStamp":"","requestId":"","accessId":""} (keys in that order, no whitespace) using your access secret. The request body, method and path are not signed. The API key must be linked to an outlet.

Headers

authorization

string

required

x-timestamp

string<date-time>

required

ISO 8601 timestamp; must be within 5 minutes of server time

x-request-id

string<uuid>

required

A unique UUID v4 per request

x-access-id

string

required

Your API access ID provided by Tender

Query Parameters

page

integer

default:1

Page number, starting at 1

Required range: x >= 1

limit

integer

default:10

Number of log entries per page

Required range: x >= 1

Response

Webhook logs fetched

status

enum<string>

required

Available options:

success

message

string

required

data

object

required

Show child attributes

Payment

Transactions

System

Agents

Conversions

Payouts

Subwallets

Webhooks

On-ramp

Get Webhook Logs

Headers

Query Parameters

Response

Authorizations

Headers

Query Parameters

Response

​Headers

​Query Parameters

​Response

Authorizations

Headers

Query Parameters

Response

Headers

Query Parameters

Response