List an issue's kept versions

GET/v1/organization/{orgId}/marketing/newsletter/issues/{issueId}/versions

US Region: https://public-api.sessionboard.com · EU Region: https://public-api-eu.sessionboard.com

The issue as it was before each edit, newest first: version, summary (what the edit that replaced it changed, in plain words), replaced_by (who: a person or the assistant's name) and created_at. Requires read:marketing; refused for a key restricted to particular events. Also at GET /v1/marketing/newsletter/issues/{issueId}/versions.

Request example

cURL

curl --request GET \
  --url 'https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/newsletter/issues/{issueId}/versions' \
  --header 'x-access-token: <api-token>'

JavaScript

const response = await fetch('https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/newsletter/issues/{issueId}/versions', {
  method: 'GET',
  headers: {
    "x-access-token": "<api-token>"
  },
});

const data = await response.json();
console.log(data);

Python

import requests

response = requests.request(
    "GET",
    "https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/newsletter/issues/{issueId}/versions",
    headers={
        "x-access-token": "<api-token>"
    },
)

print(response.json())

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => "https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/newsletter/issues/{issueId}/versions",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => "GET",
    CURLOPT_HTTPHEADER => [
        "x-access-token: <api-token>",
    ],
]);

$response = curl_exec($curl);
curl_close($curl);

echo $response;

Go

package main

import (
  "fmt"
  "io"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("GET", "https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/newsletter/issues/{issueId}/versions", nil)
  req.Header.Add("x-access-token", "<api-token>")

  res, _ := http.DefaultClient.Do(req)
  defer res.Body.Close()
  body, _ := io.ReadAll(res.Body)

  fmt.Println(string(body))
}

Java

HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://public-api.sessionboard.com/v1/organization/{orgId}/marketing/newsletter/issues/{issueId}/versions"))
    .header("x-access-token", "<api-token>")
    .method("GET", HttpRequest.BodyPublishers.noBody())
    .build();

HttpResponse<String> response = HttpClient.newHttpClient()
    .send(request, HttpResponse.BodyHandlers.ofString());

System.out.println(response.body());

Try it

RegionUS Region — https://public-api.sessionboard.comEU Region — https://public-api-eu.sessionboard.com

Authorization

Send asAPI token (x-access-token)OAuth access token (Bearer)

Token

Your token stays in this page. It is sent only to the region above and is never saved; it is gone when you leave or reload the page.

Path parameters

orgId*

issueId*

GET

Send request

Authorizations

• x-access-tokenstringheader

  Organization API token. Generate from Organization Settings → API Tokens.

• AuthorizationBearer <token>headeror

  OAuth 2.1 access token. Obtained via the OAuth PKCE flow at /oauth/token.

Send one of these. See Authentication.

Path parameters

• orgIdstringpathrequired

  Your organization ID. Any other organization returns 404.

• issueIdstringpathrequired

  The issue

Responses

200application/json

payload with issue_id and versions

• payloadobject
  Show child attributes

  • issue_idstring
  • versionsDraftVersion[]
    Show child attributes

    • idstring
    • versioninteger
    • summarystring[]

      What the edit that replaced this version changed.

    • replaced_byobject | null
      Show child attributes

      • labelstring | null

        Example

        "Claude"

      • vendorstring | null
      • atstring<date-time> | null
    • created_atstring<date-time>

403

• SCOPE_REQUIRED — the token lacks read:marketing (reads) or write:marketing (writes).
• ORG_WIDE_TOKEN_REQUIRED — the token is restricted to particular events; this operation reads the whole organization.
• FORBIDDEN — the organization's plan does not include Marketing, or the token's user cannot change goals (writes need an organization admin or the organization settings permission).

404

Not found in your organization.

Response examples

200

{
  "payload": {
    "issue_id": "<string>",
    "versions": [
      {
        "id": "<string>",
        "version": 123,
        "summary": [
          "<string>"
        ],
        "replaced_by": {
          "label": "Claude",
          "vendor": "<string>",
          "at": "2026-01-15T09:30:00Z"
        },
        "created_at": "2026-01-15T09:30:00Z"
      }
    ]
  }
}