List updates

Use this operation for list updates. Follow the realtime account updates guide for the complete workflow.

Realtime account updates guide · All endpoints · SDK: listUpdates, createAccountSync, syncAccount, watchAccount

Authentication

Server-to-server HMAC. Your key selects the partner; your backend must authorize the end user.

CRISP enables access to the features agreed for your integration. Contact CRISP if an enabled feature returns an access error.

Idempotency-Key: Not required by this operation. Signing and authentication →

Request fields

Required means the field must be present. Nullable means an explicit JSON null is allowed; it does not mean optional.

Path parameters

Field	Type / presence	Description and constraints
`externalUserId`	`string` Required Non-null	Your stable user ID within the authenticated partner. Derive it from your authorized server session. Validation pattern `^[A-Za-z0-9._:@-]{1,200}$`

Query parameters

Field	Type / presence	Description and constraints
`cursor`	`string` Optional Non-null	Continuation cursor. Preserve and pass the returned value when requesting the next page. Validation pattern `^\d+$`
`limit`	`integer` Optional Non-null	Maximum number of records requested in one page. Default: 100 minimum: 1 maximum: 200

Header parameters

No operation-specific headers. The HMAC headers above still apply.

JSON body

No request body.

Illustrative identifiers only: replace them with resources from your integration. Keep credentials on your backend. HTTP placeholders must be signed; the SDK signs automatically. Financial intent keys must be persisted and unique per new action.

GET /v1/accounts/user-123/updates?limit=100
Host: partner-api.crisp.trade
X-Crisp-Partner-Key: <server-key-id>
X-Crisp-Timestamp: <fresh-ISO-8601-UTC-timestamp>
X-Crisp-Nonce: <fresh-unique-nonce>
X-Crisp-Signature: <computed-base64-HMAC>

Response fields

HTTP responses use the envelope below. SDK calls expose its payload as result.data, with HTTP status and request metadata on the SDK wrapper.

200 · Success

Data payload

Field Type / presence Description and constraints

crispAccountId

string

Required

Non-null

CRISP's account identifier; distinct from your external user ID.

Format: uuid

externalUserId

string

Required

Non-null

Your stable user ID within the authenticated partner. Derive it from your authorized server session.

Validation pattern

^[A-Za-z0-9._:@-]{1,200}$

events

array<object>

Required

Non-null

Expand the structure below.

events: expand item fields

Field	Type / presence	Description and constraints
`id`	`string` Required Non-null	Format: uuid
`cursor`	`string` Required Non-null	Continuation cursor. Preserve and pass the returned value when requesting the next page.
`version`	`integer` Required Non-null	Allowed: 1
`type`	`string` Required Non-null	Allowed: "account.status_changed", "order.updated", "trade.recorded", "balance.updated", "funding.updated", "withdrawal.updated", "position.redeemed", "settlement.updated", "reconciliation.completed"
`externalUserId`	`string` Required Non-null	Your stable user ID within the authenticated partner. Derive it from your authorized server session. Validation pattern `^[A-Za-z0-9._:@-]{1,200}$`
`accountId`	`string` Required Non-null	Format: uuid
`occurredAt`	`string` Required Non-null	Format: date-time
`data`	`object` Required Non-null	Venue-owned JSON extension; fields are not a stable CRISP contract. Handle missing fields.

Additional fields are not allowed in this object.

updates

array<object>

Required

Non-null

Expand the structure below.

updates: expand item fields

Field	Type / presence	Description and constraints
`id`	`string` Required Non-null	Format: uuid
`cursor`	`string` Required Non-null	Continuation cursor. Preserve and pass the returned value when requesting the next page.
`version`	`integer` Required Non-null	Allowed: 1
`type`	`string` Required Non-null	Allowed: "account.status_changed", "order.updated", "trade.recorded", "balance.updated", "funding.updated", "withdrawal.updated", "position.redeemed", "settlement.updated", "reconciliation.completed"
`externalUserId`	`string` Required Non-null	Your stable user ID within the authenticated partner. Derive it from your authorized server session. Validation pattern `^[A-Za-z0-9._:@-]{1,200}$`
`accountId`	`string` Required Non-null	Format: uuid
`occurredAt`	`string` Required Non-null	Format: date-time
`data`	`object` Required Non-null	Venue-owned JSON extension; fields are not a stable CRISP contract. Handle missing fields.

Additional fields are not allowed in this object.

cursor

string

Required

Non-null

Continuation cursor. Preserve and pass the returned value when requesting the next page.

hasMore

boolean

Required

Non-null

Whether further pages remain in this result set.

Additional fields are not allowed in this object.

Full HTTP envelope

Field Type / presence Description and constraints

data

object

Required

Non-null

Expand the structure below.

data: expand fields

Field Type / presence Description and constraints

crispAccountId

string

Required

Non-null

CRISP's account identifier; distinct from your external user ID.

Format: uuid

externalUserId

string

Required

Non-null

Your stable user ID within the authenticated partner. Derive it from your authorized server session.

Validation pattern

^[A-Za-z0-9._:@-]{1,200}$

events

array<object>

Required

Non-null

Expand the structure below.

events: expand item fields

Field	Type / presence	Description and constraints
`id`	`string` Required Non-null	Format: uuid
`cursor`	`string` Required Non-null	Continuation cursor. Preserve and pass the returned value when requesting the next page.
`version`	`integer` Required Non-null	Allowed: 1
`type`	`string` Required Non-null	Allowed: "account.status_changed", "order.updated", "trade.recorded", "balance.updated", "funding.updated", "withdrawal.updated", "position.redeemed", "settlement.updated", "reconciliation.completed"
`externalUserId`	`string` Required Non-null	Your stable user ID within the authenticated partner. Derive it from your authorized server session. Validation pattern `^[A-Za-z0-9._:@-]{1,200}$`
`accountId`	`string` Required Non-null	Format: uuid
`occurredAt`	`string` Required Non-null	Format: date-time
`data`	`object` Required Non-null	Venue-owned JSON extension; fields are not a stable CRISP contract. Handle missing fields.

Additional fields are not allowed in this object.

updates

array<object>

Required

Non-null

Expand the structure below.

updates: expand item fields

Field	Type / presence	Description and constraints
`id`	`string` Required Non-null	Format: uuid
`cursor`	`string` Required Non-null	Continuation cursor. Preserve and pass the returned value when requesting the next page.
`version`	`integer` Required Non-null	Allowed: 1
`type`	`string` Required Non-null	Allowed: "account.status_changed", "order.updated", "trade.recorded", "balance.updated", "funding.updated", "withdrawal.updated", "position.redeemed", "settlement.updated", "reconciliation.completed"
`externalUserId`	`string` Required Non-null	Your stable user ID within the authenticated partner. Derive it from your authorized server session. Validation pattern `^[A-Za-z0-9._:@-]{1,200}$`
`accountId`	`string` Required Non-null	Format: uuid
`occurredAt`	`string` Required Non-null	Format: date-time
`data`	`object` Required Non-null	Venue-owned JSON extension; fields are not a stable CRISP contract. Handle missing fields.

Additional fields are not allowed in this object.

cursor

string

Required

Non-null

Continuation cursor. Preserve and pass the returned value when requesting the next page.

hasMore

boolean

Required

Non-null

Whether further pages remain in this result set.

Additional fields are not allowed in this object.

requestId

string

Required

Non-null

Request correlation ID for debugging and support.

Additional fields are not allowed in this object.

Response example

Schema illustration, not live account data. Null means unavailable or not applicable, never an invented zero. Empty arrays do not imply the endpoint always returns no results.

200 response JSON

{
  "data": {
    "crispAccountId": "11111111-1111-4111-8111-111111111111",
    "externalUserId": "user-123",
    "events": [],
    "updates": [],
    "cursor": "example",
    "hasMore": false
  },
  "requestId": "example-request-id"
}

Errors and recovery

Status	Meaning
`400`	Inspect error.code and retain the original financial intent.
`401`	Inspect error.code and retain the original financial intent.
`403`	Inspect error.code and retain the original financial intent.
`404`	Not visible for this account. A recovery lookup miss is not proof that an in-flight submission failed.
`409`	Inspect error.code and retain the original financial intent.
`429`	Inspect error.code and retain the original financial intent.
`500`	Inspect error.code and retain the original financial intent.
`502`	Inspect error.code and retain the original financial intent.
`503`	Inspect error.code and retain the original financial intent.

Inspect the error code and outcomeUnknown, not just the HTTP status. Preserve the original intent after financial uncertainty. Read-only retries should honor Retry-After. Recovery workflow →

Error response fields

Field Type / presence Description and constraints

error

object

Required

Non-null

Expand the structure below.

error: expand fields

Field	Type / presence	Description and constraints
`code`	`string` Required Non-null	—
`message`	`string` Required Non-null	—
`requestId`	`string` Required Non-null	Request correlation ID for debugging and support.

Additional fields are not allowed in this object.

Raw contract

OpenAPI download · Advanced schema and legacy anchor

Authentication

Request fields

Path parameters

Query parameters

Header parameters

JSON body

Request example

Response fields

200 · Success

Data payload

Response example

Errors and recovery

Raw contract

On this page