Skip to main content
GET

Authorizations

Authorization
string
header
required

Bearer API Key, for example Bearer sk_live_xxx.

X-StablePay-Timestamp
string
header
required

Unix timestamp in seconds. Must be within 5 minutes of server time.

X-StablePay-Nonce
string
header
required

Replay-protection nonce, 16-64 characters. Use a fresh UUID per request.

X-StablePay-Signature
string
header
required

Lowercase hex HMAC-SHA256 of {timestamp}.{nonce}.{requestBody} signed with the merchant API Secret. For GET requests, requestBody is an empty string.

Headers

X-StablePay-Timestamp
string
required

Unix timestamp in seconds. Must be within 5 minutes of server time.

X-StablePay-Nonce
string
required

Replay-protection nonce, 16-64 characters. Use a fresh UUID per request.

Required string length: 16 - 64
X-StablePay-Signature
string
required

Lowercase hex HMAC-SHA256 of {timestamp}.{nonce}.{requestBody} signed with the merchant API Secret. For GET requests, requestBody is an empty string.

Query Parameters

customer
string

Filter by external customer ID.

status
enum<string>

Filter by subscription status. Subscription status.

Available options:
incomplete,
trialing,
active,
past_due,
canceled,
incomplete_expired
limit
integer
default:10

Number of records to return. Defaults to 10, maximum 100. Cursor pagination is not used by the current implementation.

Required range: 1 <= x <= 100

Response

Listed successfully.

object
string
Example:

"list"

data
object[]
has_more
boolean

Whether more data may exist. The current implementation checks whether the returned count equals limit.

url
string

Current request URL.

Last modified on April 30, 2026