> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aropay.aro.media/llms.txt
> Use this file to discover all available pages before exploring further.

# List transactions

> Paginated transaction history, newest first. In-flight rows are lazily
reconciled on read.




## OpenAPI

````yaml /api-reference/openapi.yaml get /transactions
openapi: 3.1.0
info:
  title: AroPay API
  version: 1.0.0
  description: |
    The AroPay API for orchestrating sealed, private payments on public
    ledgers, built on the Aro Confidential Rails (Zama Protocol FHE). The
    current deployment is an MVP sandbox for B2B users on Ethereum Sepolia,
    with Mainnet to follow.

    Every response (except the flat Sandbox probes)
    uses the shared envelope: `{ "ok": true, "data": … }` on success and
    `{ "ok": false, "error": { "code", "message", "details?" } }` on failure.

    Amounts are decimal strings in human units (e.g. `"125.50"`). Write
    requests must send `Content-Type: application/json`.
  contact:
    name: Aro Media
    url: https://aro.media
servers:
  - url: https://aropay.aro.media/api/v1
    description: Sandbox
  - url: http://aropay.localhost:3000/api/v1
    description: Local development
security:
  - apiKeyAuth: []
  - sessionCookie: []
tags:
  - name: Auth
    description: Password, TOTP, and passkey login; session inspection and logout.
  - name: Profile & security
    description: Profile, password, two-factor authentication, and passkey management.
    x-group: Profile & security
  - name: API keys
    description: Programmatic credentials. Creation and revocation are session-only.
  - name: Wallets
    description: Custodial and external (watch-only) wallets.
  - name: Balances
    description: Balance triples and lightweight gas reads.
  - name: Money movement
    description: Faucet funding, minting, transfers, and redemptions.
  - name: Transactions
    description: History, single-transaction reads, and notarized receipts.
  - name: Sandbox
    description: Unauthenticated status and echo probes with a flat response shape.
paths:
  /transactions:
    get:
      tags:
        - Transactions
      summary: List transactions
      description: |
        Paginated transaction history, newest first. In-flight rows are lazily
        reconciled on read.
      operationId: listTransactions
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            minimum: 1
            default: 1
        - name: pageSize
          in: query
          schema:
            type: integer
            minimum: 1
            maximum: 100
            default: 20
        - name: type
          in: query
          schema:
            type: string
            enum:
              - FUND
              - MINT
              - TRANSFER
              - PRIVATE_TRANSFER
              - REDEEM
          description: Filter by transaction type.
        - name: status
          in: query
          schema:
            type: string
            enum:
              - PENDING
              - CONFIRMED
              - SETTLING
              - SETTLED
              - FAILED
          description: Filter by status.
        - name: walletId
          in: query
          schema:
            type: string
          description: Filter to one wallet.
      responses:
        '200':
          description: A page of transactions.
          content:
            application/json:
              schema:
                type: object
                required:
                  - ok
                  - data
                properties:
                  ok:
                    const: true
                  data:
                    type: object
                    required:
                      - items
                      - page
                      - pageSize
                      - total
                    properties:
                      items:
                        type: array
                        items:
                          $ref: '#/components/schemas/Transaction'
                      page:
                        type: integer
                      pageSize:
                        type: integer
                      total:
                        type: integer
                        description: Total matching rows across all pages.
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/AccountDisabled'
        '429':
          $ref: '#/components/responses/RateLimited'
        '500':
          $ref: '#/components/responses/InternalError'
components:
  schemas:
    Transaction:
      type: object
      description: A sandbox operation and its on-chain outcome.
      required:
        - id
        - type
        - status
        - chainId
        - amount
        - token
        - txHash
        - settlementTxHash
        - explorerUrl
        - fromAddress
        - toAddress
        - counterparty
        - walletId
        - error
        - metadata
        - createdAt
        - updatedAt
      properties:
        id:
          type: string
          examples:
            - cktxn0001abcd
        type:
          type: string
          enum:
            - FUND
            - MINT
            - TRANSFER
            - PRIVATE_TRANSFER
            - REDEEM
        status:
          type: string
          enum:
            - PENDING
            - CONFIRMED
            - SETTLING
            - SETTLED
            - FAILED
          description: |
            `PENDING` → `CONFIRMED`/`FAILED` for most types; redeems go
            `PENDING` → `SETTLING` → `SETTLED`. Terminal states: `CONFIRMED`,
            `SETTLED`, `FAILED`.
        chainId:
          type: integer
          examples:
            - 11155111
        amount:
          type: string
          description: Decimal string in human units.
        token:
          type: string
          description: Token symbol the amount denominates.
        txHash:
          type:
            - string
            - 'null'
          description: First-leg transaction hash.
        settlementTxHash:
          type:
            - string
            - 'null'
          description: Second-leg hash; redeem payout or the faucet's stablecoin leg.
        explorerUrl:
          type:
            - string
            - 'null'
          description: Block-explorer link for `txHash`.
        fromAddress:
          type:
            - string
            - 'null'
        toAddress:
          type:
            - string
            - 'null'
        counterparty:
          type:
            - string
            - 'null'
        walletId:
          type:
            - string
            - 'null'
        error:
          type:
            - string
            - 'null'
          description: Failure context when `status` is `FAILED`.
        metadata:
          description: Operation-specific context (object or null).
        createdAt:
          type: string
          format: date-time
        updatedAt:
          type: string
          format: date-time
    ErrorResponse:
      type: object
      description: The shared failure envelope.
      required:
        - ok
        - error
      properties:
        ok:
          const: false
        error:
          type: object
          required:
            - code
            - message
          properties:
            code:
              type: string
              description: Machine-readable error code; match on this, not `message`.
            message:
              type: string
            details:
              description: Structured context, e.g. per-field validation issues.
  responses:
    BadRequest:
      description: Malformed body or failed validation.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
          example:
            ok: false
            error:
              code: validation_error
              message: Request validation failed.
              details:
                - path: amount
                  message: Required
    Unauthorized:
      description: Missing or invalid credential.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
          example:
            ok: false
            error:
              code: invalid_api_key
              message: Invalid API key.
    AccountDisabled:
      description: The account has been deactivated.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
          example:
            ok: false
            error:
              code: account_disabled
              message: This account is disabled.
    RateLimited:
      description: Rate limit exceeded.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
          example:
            ok: false
            error:
              code: rate_limited
              message: Too many requests. Try again shortly.
    InternalError:
      description: Unexpected server error.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
          example:
            ok: false
            error:
              code: internal_error
              message: An unexpected error occurred.
  securitySchemes:
    apiKeyAuth:
      type: http
      scheme: bearer
      bearerFormat: aro_sk_…
      description: |
        AroPay API key, sent as `Authorization: Bearer aro_sk_…`. Created in
        the dashboard under Settings → API keys. Takes precedence over a
        session cookie when both are present.
      x-default: aro_sk_your_key_here
    sessionCookie:
      type: apiKey
      in: cookie
      name: aropay_session
      description: |
        Browser session cookie minted by `POST /auth/login` (or passkey
        login). httpOnly, `SameSite=Lax`, 24 h TTL. Endpoints marked
        **Session-only** accept only this credential and return
        `403 session_required` for API keys.

````