Read a subscription product

GEThttps://<your-url>/api/v2/subscription-products/{subscription_product}

MCP id subscription-products.showAlso on this path: PATCH Update a subscription product, DELETE Delete a subscription product

View as Markdown openapi.json

Returns one product in the detail view.

Token scope: api:read:subscription_products
Without it: 403 insufficient-token-scope.
Permission: subscription_products::read
Without it: 403 insufficient-permission.
Feature: Needs the billing feature on your organisation.
Without it: 404 endpoint-not-found.
Rate cost: 1 unit, read bucket.
Also: If-None-Match answers 304 when nothing changed. Never cached: private, no-store. Unknown query parameters are refused, never ignored.

Both are checked, scope first. A token never does more than its user. How access is checked

Request

Example: One product

curl -X GET \
  'https://<your-url>/api/v2/subscription-products/1' \
  -H 'Authorization: Bearer <token>' \
  -H 'Accept: application/json'

const response = await fetch('https://<your-url>/api/v2/subscription-products/1', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer <token>',
    'Accept': 'application/json',
  },
});

use Illuminate\Support\Facades\Http;

$response = Http::withToken('<token>')
    ->acceptJson()
    ->get('https://<your-url>/api/v2/subscription-products/1');

import requests
response = requests.request(
    'GET',
    'https://<your-url>/api/v2/subscription-products/1',
    headers={'Authorization': 'Bearer <token>', 'Accept': 'application/json'},
)

Response

The shape of the response, with sample values.

{
  "data": {
    "id": 1,
    "name": "Managed hosting, small",
    "description": "Managed hosting for {{$site}} over {{$period}}.",
    "purchase_price": "1250.00",
    "sales_price": "49.50",
    "price_interval": "monthly",
    "is_hosting": true,
    "vat_rate": 21,
    "exact_item_id": "…",
    "exact_vat_code": "…",
    "exact_cost_center": "…",
    "created_at": "2026-03-04T09:15:00Z"
  },
  "meta": {
    "actions": [
      "restore"
    ]
  }
}

3 more fields, listed under Response

Products are soft-deleted, so a deleted product is 404 unless trashed=with or trashed=only is passed; trashed=only 404s a live product.

Path parameters

subscription_productintegerRequired

The SubscriptionProduct's numeric id. Accepts a soft-deleted record.

Query parameters

Unknown parameters are refused with 400, naming the parameter.

viewstring

Which field set to render.

summarydetaildefault

trashedstring

Whether soft-deleted rows are included.

withoutdefaultwithonly

metaarray of string

Optional meta members to compute for this response.

actions

New values may be added.

Request headers

X-Request-Idstringpattern

A correlation id of your own. It is recorded in our logs next to the server's request id but never returned: the response header always carries the server's id. A value that does not match the pattern is discarded silently, never rejected.

If-None-Matchstring

The ETag a read is conditional on. A match is answered 304 with no body.

Response 200

Returns a SubscriptionProduct in the detail view.

Headers

ETag: A strong validator of exactly this representation.
RateLimit: The IETF httpapi-ratelimit-headers form of your remaining allowance on the tightest bucket this request touched.
RateLimit-Policy: The ceiling and window of that bucket, as <limit>;w=<seconds>.
X-Request-Id: The server-generated ULID correlating this response with our logs.

Every response also carries Cache-Control, Vary, X-Content-Type-Options, X-Plnnrly-Api-Version, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset. Headers and versioning