> ## Documentation Index > Fetch the complete documentation index at: https://docs.beinfi.com/llms.txt > Use this file to discover all available pages before exploring further. # List payments > Every charge attempt on your account, newest first, each with its payment method and who paid. Filters apply before pagination, so `limit` and `offset` page through matching payments only. ## OpenAPI ````yaml /api-reference/openapi.en.json get /billing/payments openapi: 3.1.0 info: title: Infi API version: 0.0.1 description: > The Infi REST API: catalog, customers, usage metering, subscriptions, invoices, payments and checkout. **Authentication.** Send your secret key as `Authorization: Bearer sk_test_…` (sandbox) or `sk_live_…` (production). The key prefix selects the environment. Checkout routes (`/pay/*`) and `/public/*` take no key: they run in the payer's browser. **Idempotency.** Every request that changes data requires an `Idempotency-Key` header. A retry with the same key returns the original response instead of running again. **Amounts.** Money and quantities travel as decimal strings (`"150.00"`, `"0.0001"`), never as floating-point numbers. **Errors.** The body carries `error_code` (stable, branch on it), `message` (for humans) and `tracer_id` (send it to support). Rate-limit and idempotency errors are nested under `error`, with `code` and `request_id`. servers: - url: https://api-sandbox.beinfi.com description: Sandbox - url: https://api.beinfi.com description: Production security: - bearerAuth: [] tags: - name: Catalog - name: Customers - name: Metering - name: Subscriptions - name: Invoices - name: Payments - name: Checkout - name: Coupons - name: Billing - name: Account - name: Webhooks - name: Test account - name: Rail - name: Storefronts paths: /billing/payments: get: tags: - Payments summary: List payments description: > Every charge attempt on your account, newest first, each with its payment method and who paid. Filters apply before pagination, so `limit` and `offset` page through matching payments only. operationId: listTenantPayments parameters: - name: status in: query required: false schema: type: string enum: - pending - confirmed - failed - refunded - charged_back description: Filter by payment status. - name: provider in: query required: false schema: type: string description: >- Filter by the processor the charge ran through, as shown in the payment's `provider` field (for example, `sandbox`). - name: method in: query required: false schema: type: string enum: - pix - boleto - card - crypto description: Filter by payment method. - name: limit in: query required: false schema: type: integer - name: offset in: query required: false schema: type: integer responses: '200': content: application/json: schema: type: object properties: payments: type: array items: $ref: '#/components/schemas/Payment' description: List of payments. '401': $ref: '#/components/responses/Unauthorized' components: schemas: Payment: type: object properties: id: type: string format: uuid invoiceId: type: string format: uuid provider: type: string description: The processor the charge ran through. In sandbox, `sandbox`. providerId: type: - string - 'null' description: The charge's reference at the processor, useful for support. method: type: string enum: - pix - boleto - card - crypto amount: type: string description: Amount charged, as a decimal string. currency: type: string status: type: string enum: - pending - confirmed - failed - refunded - charged_back description: >- `pending` awaits payment; `confirmed` was paid; `failed` was not paid (see `failureCode`); `refunded` was fully refunded; `charged_back` was disputed by the buyer with their bank. refundedAmount: type: string description: >- Total refunded so far, as a decimal string. Absent when nothing was refunded. A partial refund keeps `status` at `confirmed`; only refunding the full amount sets `refunded`. Use this field, not `status`, to know how much went back. failureCode: type: - string - 'null' enum: - insufficient_funds - do_not_honor - card_declined - authentication_required - card_expired - card_stolen - card_invalid - mandate_revoked - mandate_refused - brand_changed - provider_error - provider_timeout - superseded - null description: >- Why the charge failed. `superseded` is not a decline: the buyer switched payment method to pay the same invoice. Null when the payment did not fail or when no reason was recorded. New codes may appear; treat an unknown value as a generic failure. failedAt: type: - string - 'null' format: date-time description: When the charge moved to `failed`. createdAt: type: string format: date-time payer: type: - object - 'null' properties: id: type: string format: uuid name: type: - string - 'null' email: type: - string - 'null' description: >- Who paid. On a one-off invoice, `id` is the customer ID; on a subscription invoice, it is the ID of the customer's enrollment in the product. Present only on `GET /billing/payments` and `GET /billing/payments/{paymentID}`, and null when the invoice does not identify the customer. invoiceUrl: type: string description: Hosted payment page. Present only on the charge-creation response. chargeToken: type: string description: >- Single-use token for the crypto payment widget. Present only on a crypto charge response. network: type: string enum: - main - test description: 'Crypto widget environment for this charge: `main` (real) or `test`.' settlementAsset: type: string enum: - USDC description: Asset the crypto charge settles in. settlementNetwork: type: string enum: - base - solana description: Network the crypto charge settles on. pixPayload: type: string description: >- Pix copy-and-paste code. Render the QR from it. Still available on later reads of the payment. pixQrImage: type: string description: >- The Pix QR as a base64 PNG (no `data:` prefix), if you would rather not render it yourself. providerPixPayload: type: string description: >- Sandbox only: the Pix code the test processor generated, for inspection. Not payable. In sandbox, `pixPayload` carries the test confirmation link. sandboxConfirmUrl: type: string description: >- Sandbox only: a page that marks this charge as paid without real money. Branch on whether this field is present, not on the shape of `pixPayload`. You do not need it to render: `pixPayload` is a QR in both environments. pixExpiresAt: type: - string - 'null' format: date-time description: When the Pix code expires (Pix charges only). clientSecret: type: string description: >- Temporary secret to confirm a card charge in the browser. Present only on the charge-creation response. publishableKey: type: string description: >- Public key paired with `clientSecret`. Present only on the charge-creation response. nextAction: $ref: '#/components/schemas/PaymentNextAction' description: >- Data to complete a card charge in the browser. Present only on the charge-creation response. switchable: type: boolean description: >- Whether this charge can still be dropped so the same invoice is paid another way: `true` while `pending`, `false` once paid or failed. Present only on the charge-creation response; treat a missing value as `false`. description: >- One charge attempt against an invoice. An invoice can have several payments. PaymentNextAction: oneOf: - $ref: '#/components/schemas/CardSessionAction' - $ref: '#/components/schemas/CardPaymentAction' discriminator: propertyName: type mapping: adyen_session: $ref: '#/components/schemas/CardSessionAction' stripe_payment_intent: $ref: '#/components/schemas/CardPaymentAction' description: >- Temporary data for the browser to complete the charge. Branch on `type`. Use it only in the same session; do not reuse it or accept these values back from the browser. Error: type: object required: - message - error_code - tracer_id properties: message: type: string description: Human-readable sentence. error_code: $ref: '#/components/schemas/ErrorCode' description: Stable error code. Branch on it. tracer_id: type: string description: Request id. Include it when contacting support. description: >- The standard error body. It is flat (no `error` wrapper) and the trace id is `tracer_id`. CardSessionAction: type: object additionalProperties: false required: - type - session - clientKey - environment - countryCode - locale - amount properties: type: type: string const: adyen_session session: type: object additionalProperties: false required: - id - sessionData properties: id: type: string sessionData: type: string description: Checkout session to open in the browser. Do not store or log it. clientKey: type: string description: Public key, safe for the browser. environment: type: string enum: - live - live-us - live-au - live-nea - live-in description: Environment the form must load in. countryCode: type: string const: BR locale: type: string const: pt-BR amount: $ref: '#/components/schemas/ClientActionAmount' description: Charge amount. description: Payment session for the in-browser card form. CardPaymentAction: type: object additionalProperties: false required: - type - clientSecret - publishableKey properties: type: type: string const: stripe_payment_intent clientSecret: type: string description: Temporary secret to confirm the charge in the browser. publishableKey: type: string description: Public key, safe for the browser. description: Data to confirm the card charge in the browser. ErrorCode: type: string examples: - internal_error - validation_failed - bad_request - unauthorized - forbidden - not_found - conflict - rate_limited description: >- Stable error code. The list is open: besides the generic codes, each area defines its own (`coupon_expired`, `insufficient_balance`, `version_not_draft`, `idempotency_key_reused`…). Handle a code you do not recognize by its HTTP status and show `message`; do not fail parsing the response. ClientActionAmount: type: object additionalProperties: false required: - value - currency properties: value: type: integer format: int64 minimum: 0 description: Amount in the currency's minor unit (cents, for BRL). currency: type: string example: BRL responses: Unauthorized: content: application/json: schema: $ref: '#/components/schemas/Error' description: Missing or invalid API key. securitySchemes: bearerAuth: type: http scheme: bearer description: >- Your account's secret key: `Authorization: Bearer sk_test_…` or `sk_live_…`. Server-side only. ````