List webhook delivery attempts (audit log).
Returns the most recent per-attempt rows for this webhook subscription, newest first. P2-A — durable delivery audit log + retry queue.
Each row carries the lifecycle status (pending /
succeeded / failed / dead_letter), the most recent
HTTP status code, the truncated last error, and the
scheduled time of the next attempt while the row is still
in-flight. Sensitive fields — the rendered payload bytes,
the optional bearer token, and the HMAC secret — are
NEVER returned.
Use this endpoint when:
- a callback didn’t arrive and you need to confirm
whether BeeOS attempted it (
status=failed/dead_letterwith a populatedlast_error); - you’re reconciling a missed webhook against
GET /tasks/{id}and want a definitive audit trail; - you intend to manually replay a dead-lettered row via
POST .../redeliver.
Authorizations
Pass a user JWT or a oag_ User API Key on the
Authorization: Bearer <token> header. Both are validated by
openapi-gateway against the Auth service.
Both credential types are user-scoped: every key (and every JWT) is bound to exactly one owner, and every route grants the caller full access to that owner's own resources. Cross-tenant access is denied by owner-ACL inside the handlers — there is no per-route scope vocabulary on this API.
Removed in v1.1.0: the legacy
agents:*/tasks:*/files:*/instances:*scope set has been dropped together with the403 insufficient_scopeerror. Existingoag_keys automatically gain full owner-level access and do not need to be re-issued. SDK calls that previously passedscopestocreateAPIKeyshould drop the argument. See the changelog at the bottom of this spec for the full migration note.
Path Parameters
128128128Query Parameters
Maximum number of delivery rows to return. Clamped to [1, 200]; default 50.
1 <= x <= 200