SETSimple Easy Transactions
SET DocsAPI reference and complianceUpdated 2026-11-10
Browse: SET API (Platforms)

SET API (Platforms) · Tools

Read the security report

GET/v1/security_report

Key scope: read

What a security reviewer asks, answered from live state: your keys, your webhook endpoints, your Direct Deposit partner key if you hold one, and the audit log's counts for the last 30 days. It never shows a key or its hash.

No parameters.

Notes

  • keys.data has every key not revoked, or revoked in the last 90 days, exactly as GET /v1/api_keys answers it, up to 200. keys.summary counts keys that still work.
  • webhookEndpoints.data has every endpoint exactly as GET /v1/webhook_endpoints answers it.
  • auditLog counts writes by your keys and by SET's operator for you. refused counts answers of 400 or more, and refusedAuth counts 401 and 403.
  • lastUsedAt is written at most once a minute per key.

Errors

  • 401 api_key_required
  • 401 api_key_invalid
  • 401 api_key_wrong_mode
  • 401 api_key_expired
  • 403 scope_missing
  • 403 platform_api_paused
  • 429 rate_limited
  • 503 api_disabled

All codes: Errors.