veil

Read account transfers

Read account transfer requests involving a card on either side.

GET/v1/takeovers
Access
Public; API key optional
Client
Browser fetch supported

Parameters#

NameLocationMeaning
identityRequiredQueryPermanent card number.

Request examples#

cURL
curl -fsS 'https://veil.rip/v1/takeovers?identity=1'
javascript
const response = await fetch("https://veil.rip/v1/takeovers?identity=1");
const result = await response.json();

Try the request#

Response#

HTTP 200application/json

identity and takeovers, newest first. Each request has from, to, status, openedAt and resolvesAt.

FieldTypeMeaning
identityintegerRequested card number.
takeoversarray<Takeover>Transfers involving that card on either side.

Expand a nested object for its fields. Types ending in null allow a null value; optional fields may be absent. Other fields are present in that object.

Account takeover Takeover
FieldTypeMeaning
idintegerTakeover ID.
platformstringAccount platform.
subjectstringNormalised account identifier.
displaystring | nullAccount display name.
fromintegerCard holding the account before transfer.
tointegerCard requesting the account.
statusstringopen, cancelled or completed.
openedAtstringOpening time.
resolvesAtstringDeadline for the holder to cancel.
cancelledAtstring | nullCancellation time.
cancelledBystring | nullKey that cancelled the takeover.
completedAtstring | nullCompletion time.

Response headers#

HeaderValueMeaning
Content-Typeapplication/jsonUse the declared media type before choosing a parser.
DateHTTP dateServer time. Compare it with your clock when signing requests.
Retry-Afterinteger seconds, on rate_limited or busyWait at least this long before retrying. Other 429/503 codes do not necessarily include it.

Usage notes#

  • An open transfer has not changed the account’s owner yet.

Errors#

API errors return an error object. Use error.code for program logic; error.message is English text for people and can change. Response and error guide

HTTPCodeMeaning and next step
400invalid_parameter

A path, query or body field is missing, malformed or outside its accepted range.

Correct the field named in error.message before sending again.

404not_found

The requested card, key, alias, code or resource was not found.

Check the identifier. Temporary codes and previews may already have expired or been used.

410erased

The card existed and was erased or removed. The response also carries its public erasure receipt.

Stop using this card as current authority. Retain only the public receipt if needed.

When using an optional API key
HTTPCodeMeaning and next step
401invalid_api_key

The bearer credential is malformed, unknown, expired or revoked.

Use an active key. To use anonymous public access, remove Authorization entirely. Invalid credentials never fall back automatically.

403api_key_scope

The API key lacks read or verify scope, or the endpoint does not accept bearer keys.

Use the correct scope. Identity writes and key management still require a device signature.

403api_key_suspended

This API key is suspended.

Ask staff to restore it; another key cannot lift an account suspension.

403developer_suspended

The owner’s API account is suspended or the owner card is unavailable.

Check the owner account and any staff restriction. Creating another key does not bypass suspension.

Shared request errors
HTTPCodeMeaning and next step
429rate_limited

An anonymous, signed-request or API-key allowance was exceeded.

Wait at least Retry-After seconds. Share a queue and retry budget across your workers.

500internal_error

An unexpected server error occurred. Internal details are not returned.

Retry reads with bounded backoff. Check write results before sending a new signed operation.

503busy

The application has reached a temporary concurrency or database limit.

Wait Retry-After seconds and retry with bounded backoff.