Get Incoming Site Transfer

GET /api/site-transfers/:transferId

The recipient's view of a site transfer: which site is being offered and by whom. Only the person the transfer was sent to can read it.

Authentication: a signed-in dashboard session belonging to the recipient. API keys don't work here: the route names no site or organization to check a key against, so every API key (personal, scoped or organization) gets 401. The examples send the session cookie. The JavaScript example is for Node.js: browsers don't let scripts set a Cookie header.

Path Parameters

Prop

Type

Response

Prop

Type

Error Responses

Errors use the standard body { error, code, message, resolution }.

Prop

Type

Request

curl -X GET "https://app.rybbit.io/api/site-transfers/q3Zt8xK2mVb7Lp0RfY1nWc4sHd9eJg6a" \
  -H "Cookie: __Secure-better-auth.session_token=YOUR_SESSION_TOKEN"

Request

const response = await fetch(
  'https://app.rybbit.io/api/site-transfers/q3Zt8xK2mVb7Lp0RfY1nWc4sHd9eJg6a',
  {
    headers: {
      'Cookie': '__Secure-better-auth.session_token=YOUR_SESSION_TOKEN'
    }
  }
);

const data = await response.json();

Request

import requests

response = requests.get(
    'https://app.rybbit.io/api/site-transfers/q3Zt8xK2mVb7Lp0RfY1nWc4sHd9eJg6a',
    headers={
        'Cookie': '__Secure-better-auth.session_token=YOUR_SESSION_TOKEN'
    }
)

data = response.json()

Request

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://app.rybbit.io/api/site-transfers/q3Zt8xK2mVb7Lp0RfY1nWc4sHd9eJg6a');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'Cookie: __Secure-better-auth.session_token=YOUR_SESSION_TOKEN'
]);

$response = curl_exec($ch);
curl_close($ch);

$data = json_decode($response, true);

Request

require 'net/http'
require 'json'

uri = URI('https://app.rybbit.io/api/site-transfers/q3Zt8xK2mVb7Lp0RfY1nWc4sHd9eJg6a')
req = Net::HTTP::Get.new(uri)
req['Cookie'] = '__Secure-better-auth.session_token=YOUR_SESSION_TOKEN'

res = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) { |http| http.request(req) }
data = JSON.parse(res.body)

Request

req, _ := http.NewRequest("GET", "https://app.rybbit.io/api/site-transfers/q3Zt8xK2mVb7Lp0RfY1nWc4sHd9eJg6a", nil)
req.Header.Set("Cookie", "__Secure-better-auth.session_token=YOUR_SESSION_TOKEN")

client := &http.Client{}
resp, _ := client.Do(req)
defer resp.Body.Close()

var data map[string]interface{}
json.NewDecoder(resp.Body).Decode(&data)

Request

let client = reqwest::Client::new();
let res = client
    .get("https://app.rybbit.io/api/site-transfers/q3Zt8xK2mVb7Lp0RfY1nWc4sHd9eJg6a")
    .header("Cookie", "__Secure-better-auth.session_token=YOUR_SESSION_TOKEN")
    .send()
    .await?;

let data: serde_json::Value = res.json().await?;

Request

HttpClient client = HttpClient.newHttpClient();
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://app.rybbit.io/api/site-transfers/q3Zt8xK2mVb7Lp0RfY1nWc4sHd9eJg6a"))
    .header("Cookie", "__Secure-better-auth.session_token=YOUR_SESSION_TOKEN")
    .GET()
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());

Request

using var client = new HttpClient();
client.DefaultRequestHeaders.Add("Cookie", "__Secure-better-auth.session_token=YOUR_SESSION_TOKEN");

var response = await client.GetAsync("https://app.rybbit.io/api/site-transfers/q3Zt8xK2mVb7Lp0RfY1nWc4sHd9eJg6a");
var data = await response.Content.ReadAsStringAsync();

Response

{
  "id": "q3Zt8xK2mVb7Lp0RfY1nWc4sHd9eJg6a",
  "site": {
    "siteId": 123,
    "name": "Acme",
    "domain": "acme.com"
  },
  "sourceOrganizationId": "org_123",
  "sourceOrganizationName": "Acme Agency",
  "sentBy": "sam@acme-agency.com",
  "expiresAt": "2026-11-07T14:22:05.000Z"
}