Watch
One delivery, with every attempt
/data-api/v2/watch/deliveries/{id}- Scope
- directory:read
- Freshness
- catalog read
- Group
- Watch
- Platforms
- any
What this endpoint answers
The exact payload that was signed and sent, plus the full attempt log: status code, error and duration for each try.
This is a catalog read: it is served from the CRM Solid database in milliseconds, costs one budget unit, and reports how old the reading is in meta.cache_age_s. It needs the directory:read scope (Directory): Read the account and channel catalog across all seven platforms.
Good to know
- payload is the frozen body. A replay sends these exact bytes, so a signature you recorded against them still verifies.
- Every request carries 'X-PlayerSells-Signature: t=<unix seconds>,v1=<hex>'. Compute HMAC-SHA256 over the exact string '<t>.<raw request body>' using the endpoint's whsec_ secret and compare it to v1 with a constant-time comparison.
- Verify against the RAW body bytes, before any JSON parsing. Re-serializing the payload can reorder keys and will produce a different signature.
- Reject the request if the timestamp is more than 300 seconds from your own clock. The timestamp is inside the signed string, so it cannot be altered without breaking the signature, which is what makes this replay-resistant.
- Treat 'X-PlayerSells-Event-Id' as an idempotency key. A delivery can legitimately arrive more than once if your endpoint answered slowly after processing it.
- Answer 2xx as soon as you have stored the event. Anything else is a failure and will be retried on the backoff schedule.
Parameters
Every value the call accepts, with the example the spec ships so the request runs as written.
| Name | In | Required | Example | What it does |
|---|---|---|---|---|
id | path | required | - | Delivery id. |
Call it
Authenticate with a bearer token or the x-api-key header. Keys are server-to-server credentials. Never embed one in front-end code - call the API from your own backend and forward the result.
curl "https://crmsolid.com/data-api/v2/watch/deliveries/%7Bid%7D" \
-H "Authorization: Bearer psk_live_..."
const res = await fetch("https://crmsolid.com/data-api/v2/watch/deliveries/%7Bid%7D", {
headers: {
Authorization: `Bearer ${process.env.CRM_SOLID_DATA_API_KEY}`,
},
});
if (!res.ok) {
const { error } = await res.json();
throw new Error(`${error.code}: ${error.message} (${error.request_id})`);
}
const { data, meta } = await res.json();
import os
import requests
res = requests.get(
"https://crmsolid.com/data-api/v2/watch/deliveries/%7Bid%7D",
headers={"Authorization": f"Bearer {os.environ['CRM_SOLID_DATA_API_KEY']}"},
timeout=30,
)
res.raise_for_status()
payload = res.json()
data, meta = payload["data"], payload["meta"]
Keys look like psk_live_... for production keys, psk_test_... for test keys and are minted in the panel.
What comes back
Success is { data, meta }. Failure is { error: { code, message, request_id } }. The body below is the spec's own example: the values in it are illustrative readings, not live numbers.
- Id
- c0ffee00-1111-2222-3333-444455556666
- Status
- failed
- Attempts
- 8
- Max attempts
- 8
- Last status code
- 502
- Last error
- Endpoint answered 502.
- Payload id
- c0ffee00-1111-2222-3333-444455556666
- Payload type
- account.audience_changed
- Payload created at
- 8/31/2026, 2:15:00 AM
- Payload watch id
- 3c9e6f21-88a4-4b02-9f7d-11ab4c2e5d90
- Payload data platform
- x
- Payload data entity id
- 44196397
- Payload data handle
- elonmusk
- Payload data day
- 2026-08-30
- Payload data audience
- 241,493,123
- Payload data change
- 118,402
- Payload data change pct
- 0.049
- Attempts log
- 2 items
{
"data": {
"id": "c0ffee00-1111-2222-3333-444455556666",
"status": "failed",
"attempts": 8,
"max_attempts": 8,
"last_status_code": 502,
"last_error": "Endpoint answered 502.",
"payload": {
"id": "c0ffee00-1111-2222-3333-444455556666",
"type": "account.audience_changed",
"created_at": "2026-08-31T02:15:00.000Z",
"watch_id": "3c9e6f21-88a4-4b02-9f7d-11ab4c2e5d90",
"data": {
"platform": "x",
"entity_id": "44196397",
"handle": "elonmusk",
"day": "2026-08-30",
"audience": 241493123,
"change": 118402,
"change_pct": 0.049
}
},
"attempts_log": [
{
"attempt_no": 1,
"status_code": 502,
"error": "Endpoint answered 502.",
"duration_ms": 214,
"created_at": "2026-08-31T02:15:01.000Z"
},
{
"attempt_no": 2,
"status_code": null,
"error": "Endpoint did not respond within 10s.",
"duration_ms": 10004,
"created_at": "2026-08-31T02:16:03.000Z"
}
]
},
"meta": {
"request_id": "req_9f2c41a8b3d5",
"generated_at": "2026-08-23T09:14:02.317Z",
"took_ms": 42
}
}
The meta block
request_idstringrequiredUnique id for this request. Quote it in a support ticket.
generated_atstringrequiredServer time the response was produced.
took_msintegerrequiredMilliseconds spent server-side.
pagePageoptionalsourcestringoptionalWhich backend served the payload, for endpoints with more than one.
cache_age_sintegeroptionalAge of the underlying data in seconds. 0 for live reads.
When it fails
GET /watch/deliveries/{id} documents 8 failure statuses. Branch on error.code, which is stable and enumerated; message is prose and may change.
- 401Unauthorized
unauthorized | invalid_keyNo key was presented, or the key is unknown, revoked or expired.
- 402PaymentRequired
payment_required | subscription_inactiveThe key is valid but the plan behind it cannot serve the call: the included requests are spent and overage is switched off, capped or unfunded (payment_required), or the billing period lapsed and was not renewed (subscription_inactive). Retrying does not help; paying does. The X-Plan-* headers on this response say how far past the line you are.
Carries X-Plan, X-Plan-Limit, X-Plan-Overage, X-Plan-Period-End, X-Plan-Remaining.
- 403Forbidden
forbidden_scope | forbidden_ipThe key is valid but not allowed to make this call: it lacks the scope, or the request came from an address outside the key's allowlist.
- 404NotFound
not_foundThe addressed resource does not exist.
- 422InvalidRequest
invalid_requestA parameter is malformed, out of range or mutually exclusive with another. `details` names the offending fields.
- 429RateLimited
rate_limited | quota_exceededEither the burst ceiling for the current minute or the daily quota is spent. Distinguish with the code: rate_limited clears within the minute, quota_exceeded does not clear until 00:00 UTC.
Carries Retry-After, X-Quota-Limit, X-Quota-Remaining, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, X-Request-Id.
- 500InternalError
internal_errorSomething failed on our side. Internals are never leaked; quote the request id.
- 503Unavailable
upstream_timeout | upstream_error | not_configuredThe request could not be served right now. BRANCH ON error.code, not on the status: 'upstream_timeout' means a source was too slow (this is what a catalog query hitting its 15-second statement timeout returns, so it is reachable from any endpoint that reads the corpus, not only the live-scrape ones) and the same call is worth retrying with backoff - narrowing it with a smaller limit, a filtered scope or a less popular account makes it far less likely; 'upstream_error' means a source was unreachable, so back off further; 'not_configured' means the capability has no backing service in this deployment, and retrying will never help.
Every response carries X-Request-Id and meta.request_id. Quote it in support requests.
Coverage and limits
This endpoint is not platform-specific. Rate limits come from the tier on your key.
| Tier | Requests a minute | Requests a day | Live reads a minute |
|---|---|---|---|
| free | 30 | 1,000 | 5 |
| standard | 120 | 25,000 | 20 |
| pro | 600 | 250,000 | 60 |
| unlimited | 6,000 | 10,000,000 | 600 |
This call only draws on the ordinary per-minute and per-day columns. Every response reports where you stand in X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset and the X-Plan headers.
Start calling it
A key takes a minute to mint in the panel, no card. The reference covers authentication, the envelope, scopes, rate limits and every error code in one page.
Reference path: /data-api/reference/watch-deliveries-get