Horeca24 Partner API › Orders

Read an order's status

GEThttps://management.horeca-24.de/api/partner/v1/orders/{externalId}

404 ORDER_NOT_FOUND for an unknown order, another connection's order, or one still being received. cancellation is present after your own cancel.

Headers

AuthorizationstringRequired

Bearer pk_<connectionId>.<keyId>.<secret>

The connection's API key, from the restaurant's till. Treat it as one opaque string. 401 UNAUTHORIZED for a missing, wrong, expired or revoked key; 403 CONNECTION_REVOKED for the key of a deleted connection. After a rotation by the restaurant, the previous key keeps working for 24 hours.

Path parameters

externalIdstringRequiredpattern: ^[A-Za-z0-9._~-]{1,64}$

Your order id, as sent in POST /orders.

Response

200The order's state

orderIdstringRequiredpattern: ^oo_[0-9a-f]{64}$

Our order id

externalIdstringRequiredpattern: ^[A-Za-z0-9._~-]{1,64}$

Your order id, unique per connection

statusstringOrderStatusRequiredinProgressacceptedreadycompletedrejectedcancelled

completed, rejected and cancelled are final

versionintegerRequired≥ 1

1 at receipt; +1 per status change

updatedAtstringRequiredformat: date-time

cancellationobjectOptional

Present after your own cancel

Show child attributesHide child attributes

statusstringRequiredapproved

reasonstringOptional

Errors

objectErrorBody

401

UNAUTHORIZED: the key is missing, malformed, unknown, wrong, expired or revoked

403

CONNECTION_REVOKED: the restaurant deleted the connection; stop sending

404

An error; see ErrorCode

GET/orders/{externalId}

cURL

curl https://management.horeca-24.de/api/partner/v1/orders/A \
  -H "Authorization: Bearer $PARTNER_API_KEY"

Python

import os
import requests

url = "https://management.horeca-24.de/api/partner/v1/orders/A"

headers = {
    "Authorization": "Bearer " + os.environ["PARTNER_API_KEY"],
}

response = requests.get(url, headers=headers)

print(response.status_code)
print(response.text)

JavaScript

const response = await fetch("https://management.horeca-24.de/api/partner/v1/orders/A", {
  method: "GET",
  headers: {
    "Authorization": "Bearer " + process.env.PARTNER_API_KEY,
  },
});

const data = await response.text();
console.log(response.status, data);

PHP

<?php
$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://management.horeca-24.de/api/partner/v1/orders/A',
    CURLOPT_CUSTOMREQUEST => 'GET',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . getenv('PARTNER_API_KEY'),
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

echo $response;

Try it

ServerAuthorizationNever stored, never sent to us.externalId

Response

200

200The order's state

{
  "orderId": "oo_5c1e2d3f4a5b6c7d8e9f0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d",
  "externalId": "A-1001",
  "status": "cancelled",
  "version": 3,
  "updatedAt": "2026-10-15T10:20:00.000Z",
  "cancellation": {
    "status": "approved",
    "reason": "Customer cancelled"
  }
}

401

401UNAUTHORIZED: the key is missing, malformed, unknown, wrong, expired or revoked

{
  "error": {
    "code": "UNAUTHORIZED",
    "message": "string",
    "path": "string",
    "details": null,
    "requestId": "string"
  }
}

403

403CONNECTION_REVOKED: the restaurant deleted the connection; stop sending

{
  "error": {
    "code": "CONNECTION_REVOKED",
    "message": "string",
    "path": "string",
    "details": null,
    "requestId": "string"
  }
}

404

404An error; see ErrorCode

{
  "error": {
    "code": "INVALID_AMOUNTS",
    "message": "itemsSubtotal must be 2700",
    "path": "amounts.itemsSubtotal",
    "requestId": "6b1f2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d"
  }
}