curl --request GET \
--url https://api.listo.delivery/v1/request_logs/{id} \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.listo.delivery/v1/request_logs/{id}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.listo.delivery/v1/request_logs/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.listo.delivery/v1/request_logs/{id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.listo.delivery/v1/request_logs/{id}"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.listo.delivery/v1/request_logs/{id}")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.listo.delivery/v1/request_logs/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"id": "req_4f9c2b7e1a8d3056b1c2d3e4",
"method": "POST",
"path": "/v1/deliveries",
"endpoint": "api/v1/deliveries#create",
"status": 201,
"error_code": null,
"duration_ms": 120,
"request_id": "0b1f6c9a-7e2d-4c53-9a41-5d8e3f2a6b10",
"api_key_prefix": "lst_live_Ab1",
"test": false,
"created_at": "2026-08-01T12:00:00Z",
"request_body": {
"reference": "order-1042"
},
"response_body": {
"id": "dlv_7hK2mQ9xR4tV6bN1cZ8sLwYe",
"status": "pending"
}
}Retrieve a request log entry
One call, with what it sent (request_body) and what Listo answered
(response_body), both as JSON. For a failure, the answer is the error
envelope you received and the request is what actually went over the
wire.
These are the stored copies. An API key anywhere in a body reads as its
first characters followed by [key masked]. The one-time link in the
answer to POST /v1/connect_requests or to a Stripe onboarding call
reads [redacted: one-time link]; what you received is untouched. A body
over 64 KB is stored as an object with _listo_truncated: true, its
original_bytes and the first 64 KB as text, so you are always told
when you are not reading all of it. Headers are never stored.
A call that was not yours, or was made with a key of the other mode, is
404 not_found.
curl --request GET \
--url https://api.listo.delivery/v1/request_logs/{id} \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.listo.delivery/v1/request_logs/{id}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.listo.delivery/v1/request_logs/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.listo.delivery/v1/request_logs/{id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.listo.delivery/v1/request_logs/{id}"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.listo.delivery/v1/request_logs/{id}")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.listo.delivery/v1/request_logs/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"id": "req_4f9c2b7e1a8d3056b1c2d3e4",
"method": "POST",
"path": "/v1/deliveries",
"endpoint": "api/v1/deliveries#create",
"status": 201,
"error_code": null,
"duration_ms": 120,
"request_id": "0b1f6c9a-7e2d-4c53-9a41-5d8e3f2a6b10",
"api_key_prefix": "lst_live_Ab1",
"test": false,
"created_at": "2026-08-01T12:00:00Z",
"request_body": {
"reference": "order-1042"
},
"response_body": {
"id": "dlv_7hK2mQ9xR4tV6bN1cZ8sLwYe",
"status": "pending"
}
}Authorizations
Your API key, sent as Authorization: Bearer <key>. Live and test keys are separate; the key you send decides which world the call acts in. To try calls, use a test key (it starts with lst_test_): no real courier is sent and no real money moves, but webhooks fire and the dropoff.phone you give can receive WhatsApp messages, so use your own number. A live key (it starts with lst_live_) books and charges real deliveries.
Path Parameters
The call's req_ id, from GET /v1/request_logs. A call that is not yours, or was made with a key of the other mode, is 404 not_found.
Response
The request succeeded.
One call with what was sent and what came back. The bodies are the
stored copy: an API key anywhere in them reads as its first characters
and [key masked], the link in the answer to POST /v1/connect_requests
or a Stripe onboarding call reads [redacted: one-time link], and a body
over 64 KB is an object with _listo_truncated: true, its
original_bytes and the first 64 KB as text. Headers are never kept.
The call's id, req_ prefixed.
"req_4f9c2b7e1a8d3056b1c2d3e4"
The HTTP method of the call.
"POST"
The path that was called, with its query string. Null on a call made before paths were kept.
"/v1/deliveries"
Which operation the call reached, as controller#action.
"api/v1/deliveries#create"
The HTTP status Listo answered with.
422
The error.code of the answer when it was an error, otherwise null.
"validation_failed"
How long Listo took to answer, in milliseconds. Null when it was not measured.
118
The call's request id, the value of the X-Request-Id response header. Null on a call made before request ids were kept.
"0b1f6c9a-7e2d-4c53-9a41-5d8e3f2a6b10"
The first characters of the key that made the call, never the secret. Null when no key is on record for the call.
"lst_test_Ab1"
True when the call was made with a test key.
When Listo received the call, ISO-8601 in UTC.
"2026-11-06T16:02:11Z"
What the call sent, as JSON. Null when nothing was sent, on a call made before bodies were kept, and on the three debugging reads themselves, which keep no bodies.
What Listo answered, as JSON. Null on the same rows request_body
is.