List ad-platform pixel configs (credentials masked)

Authorizations

SessionCookie

Parameters

Path Parameters

projectId

required

string

Responses

200

{ platforms } — credentials returned masked (••••••{last4}). Some keys are dynamic — CREDENTIALS ARE NOT RETURNED IN PLAINTEXT. The handler overwrites credentials with the output of maskCredentials(): each stored key is preserved, but the value becomes “••••••” + the LAST 4 CHARACTERS of the decrypted secret (or bare “••••••” when the value is empty/non-string or decryption fails). So key NAMES and a 4-char suffix of each secret leak; the full secret does not. Treat the 4-char suffix as a low-severity information disclosure, not plaintext exposure. credentials keys are dynamic (per ad platform: token / appId / accessToken / pixelId …), so additionalProperties: string is the honest model. eventMapping is null when never set; otherwise a dynamic map of internal event name -> platform event name (may be an empty object). createdAt/updatedAt pass through normalizeUtcTimestamp (ISO-8601 UTC), falling back to the raw D1 string. Ordered by createdAt ASC.

application/json

object

platforms

required

Array<object>

object

required

string

projectId

required

string

platform

required

string

Allowed values: BAIDU DOUYIN TENCENT KUAISHOU XIAOHONGSHU BILIBILI WEIBO GOOGLE META TIKTOK BING TWITTER LINKEDIN SNAPCHAT PINTEREST KWAI GOOGLE_MEASUREMENT BIGO TRAFFICSTARS TRAFFICJUNKY PROPELLERADS DEEPCLICK MGSKY ADJUST XIAOBU OKSPIN SNAPTUBE APPLUCK MACAN

name

required

string

credentials

required

REDACTED. Keys are the stored credential field names (dynamic per platform); each value is “••••••” optionally suffixed with the last 4 characters of the decrypted secret. Never full plaintext.

object

key

additional properties

string

eventMapping

required

Dynamic map of internal event name -> platform event name; may be {}.

object

key

additional properties

string

isActive

required

boolean

lastError

required

string

nullable

createdAt

required

ISO-8601 UTC timestamp.

string

updatedAt

required

ISO-8601 UTC timestamp.

string

GET

/api/projects/{projectId}/platforms

1
curl --request GET \
2
  --url https://retidal.com/api/projects/%3Cstring%3E/platforms \
3
  --cookie trackly_session=%3CYOUR_API_KEY%3E

1
const url = 'https://retidal.com/api/projects/%3Cstring%3E/platforms';
2
const options = {method: 'GET', headers: {cookie: 'trackly_session=%3CYOUR_API_KEY%3E'}};
3

4
try {
5
  const response = await fetch(url, options);
6
  const data = await response.json();
7
  console.log(data);
8
} catch (error) {
9
  console.error(error);
10
}

1
import requests
2

3
url = "https://retidal.com/api/projects/%3Cstring%3E/platforms"
4

5
headers = {"cookie": "trackly_session=%3CYOUR_API_KEY%3E"}
6

7
response = requests.get(url, headers=headers)
8

9
print(response.json())

1
package main
2

3
import (
4
  "fmt"
5
  "net/http"
6
  "io"
7
)
8

9
func main() {
10

11
  url := "https://retidal.com/api/projects/%3Cstring%3E/platforms"
12

13
  req, _ := http.NewRequest("GET", url, nil)
14

15
  req.Header.Add("cookie", "trackly_session=%3CYOUR_API_KEY%3E")
16

17
  res, _ := http.DefaultClient.Do(req)
18

19
  defer res.Body.Close()
20
  body, _ := io.ReadAll(res.Body)
21

22
  fmt.Println(res)
23
  fmt.Println(string(body))
24

25
}

200{ platforms } — credentials returned masked (••••••{last4}). Some keys are dynamic — CREDENTIALS ARE NOT RETURNED IN PLAINTEXT. The handler overwrites credentials with the output of maskCredentials(): each stored key is preserved, but the value becomes “••••••” + the LAST 4 CHARACTERS of the decrypted secret (or bare “••••••” when the value is empty/non-string or decryption fails). So key NAMES and a 4-char suffix of each secret leak; the full secret does not. Treat the 4-char suffix as a low-severity information disclosure, not plaintext exposure. credentials keys are dynamic (per ad platform: token / appId / accessToken / pixelId …), so additionalProperties: string is the honest model. eventMapping is null when never set; otherwise a dynamic map of internal event name -> platform event name (may be an empty object). createdAt/updatedAt pass through normalizeUtcTimestamp (ISO-8601 UTC), falling back to the raw D1 string. Ordered by createdAt ASC.

1
{
2
  "platforms": [
3
    {
4
      "platform": "BAIDU"
5
    }
6
  ]
7
}