Server API
These endpoints take Authorization: Bearer sk_.... Never ship the secret key in an app or web page; they send no CORS headers.
GET /v1/customers/:app_user_id
Section titled “GET /v1/customers/:app_user_id”The same as the client call, with more detail. Subscriptions also carry latest_transaction_id, auto_renew_product_id, grace_period_expires_at, billing_retry, expiration_intent, price_increase_status and revoked_at, and the customer has a transactions array with every transaction including the store’s raw fields (raw).
Use it as the source of truth when an event arrives out of order, or to check access on demand.
GET /v1/events
Section titled “GET /v1/events”The app’s events in creation order. See Delivery and retries.
| Parameter | Notes |
|---|---|
after |
Cursor from the previous next_cursor; start with 0 |
limit |
1 to 500, default 100 |
Response: {events: [...], next_cursor, has_more}. An invalid cursor returns 400 invalid_cursor.
GET /v1/customers/:app_user_id/ad-rewards
Section titled “GET /v1/customers/:app_user_id/ad-rewards”Also accepts the secret key. See the client API.