> ## Documentation Index > Fetch the complete documentation index at: https://docs.dueflow.co/llms.txt > Use this file to discover all available pages before exploring further. # List deletions > > **Requires scope** `cards:read`, or `chapters:read`, or `fundraise:read`, or `groups:read`, or `groups:write`, or `members:read`, or `payments:read`, or `reimbursements:read`, or `reminders:read`, or `store:read` · **Minimum role** viewer Records deleted outright from the synced lists, oldest deletion first, so an incremental client can drop its copies. `resourceType` is the list the record came from (`groups.list` is `GET /groups`, `groups.listMembers` is `GET /groups/{groupId}/members`, with the group as `parentId`); without it, every list the token can read. Keep a copy per list (and per parent): a deletion removes the record from that list only, so a `groups.listMembers` deletion drops the member from that group's list, not from `/members`. Drop your copy only when `deletedAt` is later than the `updatedAt` of the copy you got from that same list and parent: a record can come back after it was deleted (a member re-added to a group). As `updatedSince`, pass the latest `deletedAt` you have seen minus a margin (5 minutes): it is stamped before the deletion commits, so one can land after a later-stamped one, and dropping a copy twice is harmless. A `groups.list` deletion also removes that group's members list. Deletions are pruned after 90 days; only an `updatedSince` or cursor older than the latest deletion pruned for the organization answers 410 `sync_expired`, and then the client resyncs the lists in full. Not reported here: an archived member leaving `groups.listMembers` (which lists active members only; `/members` reports the archive), and a chapter moved to another national leaving the old national's `/chapters`. [Scopes and roles](https://docs.dueflow.co/api-reference/scopes) ## OpenAPI ````yaml /openapi.json get /v1/deletions openapi: 3.1.0 info: title: Dueflow API version: 1.0.0 description: >- Read and write your organization's Dueflow data. Authenticate with a personal access token or an organization service token as a bearer credential; cookies are ignored. Every endpoint is also a tool on the Dueflow MCP server at https://api.dueflow.co/mcp, which accepts the same bearer tokens or an OAuth connection from ChatGPT and Claude. Timestamps in responses are RFC 3339, UTC, millisecond precision (`2026-01-31T17:04:05.123Z`). Timestamps you send are RFC 3339: send UTC (`Z`); some filters, such as `updatedSince`, also accept an offset. Responses may gain fields at any time; ignore the ones you don't know. Every failure answers with the `Error` envelope; branch on its `code`. termsOfService: https://dueflow.co/terms contact: name: Dueflow support email: hello@dueflow.co url: https://docs.dueflow.co servers: - url: https://api.dueflow.co description: Production security: - bearerAuth: [] paths: /v1/deletions: get: tags: - Sync summary: List deletions description: >- > **Requires scope** `cards:read`, or `chapters:read`, or `fundraise:read`, or `groups:read`, or `groups:write`, or `members:read`, or `payments:read`, or `reimbursements:read`, or `reminders:read`, or `store:read` · **Minimum role** viewer Records deleted outright from the synced lists, oldest deletion first, so an incremental client can drop its copies. `resourceType` is the list the record came from (`groups.list` is `GET /groups`, `groups.listMembers` is `GET /groups/{groupId}/members`, with the group as `parentId`); without it, every list the token can read. Keep a copy per list (and per parent): a deletion removes the record from that list only, so a `groups.listMembers` deletion drops the member from that group's list, not from `/members`. Drop your copy only when `deletedAt` is later than the `updatedAt` of the copy you got from that same list and parent: a record can come back after it was deleted (a member re-added to a group). As `updatedSince`, pass the latest `deletedAt` you have seen minus a margin (5 minutes): it is stamped before the deletion commits, so one can land after a later-stamped one, and dropping a copy twice is harmless. A `groups.list` deletion also removes that group's members list. Deletions are pruned after 90 days; only an `updatedSince` or cursor older than the latest deletion pruned for the organization answers 410 `sync_expired`, and then the client resyncs the lists in full. Not reported here: an archived member leaving `groups.listMembers` (which lists active members only; `/members` reports the archive), and a chapter moved to another national leaving the old national's `/chapters`. [Scopes and roles](https://docs.dueflow.co/api-reference/scopes) operationId: getDeletions parameters: - name: limit in: query required: false schema: default: 50 type: integer minimum: 1 maximum: 100 - name: cursor in: query required: false schema: type: string - name: updatedSince in: query required: false schema: type: string format: date-time - name: resourceType in: query required: false schema: type: string enum: - cardTransactions.list - cards.list - chapters.list - chapters.listMembers - fundraise.listCampaigns - groups.list - groups.listMembers - members.list - payments.list - reimbursements.list - reminders.list - store.listListings responses: '200': description: Success headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' content: application/json: schema: type: object properties: data: type: array items: type: object properties: id: type: string resourceType: type: string enum: - cardTransactions.list - cards.list - chapters.list - chapters.listMembers - fundraise.listCampaigns - groups.list - groups.listMembers - members.list - payments.list - reimbursements.list - reminders.list - store.listListings resourceId: description: The `id` of the record as its list returned it. type: string parentId: type: - string - 'null' description: >- For a list under a parent (`groups.listMembers`), the parent's id: the group the member was removed from. Null otherwise. deletedAt: type: string format: date-time description: >- Timestamp: RFC 3339, UTC, millisecond precision (`2026-01-31T17:04:05.123Z`). required: - id - resourceType - resourceId - parentId - deletedAt hasMore: type: boolean nextCursor: type: - string - 'null' required: - data - hasMore - nextCursor '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '410': $ref: '#/components/responses/SyncExpired' '429': $ref: '#/components/responses/RateLimited' default: $ref: '#/components/responses/UnexpectedError' security: - bearerAuth: - cards:read - bearerAuth: - chapters:read - bearerAuth: - fundraise:read - bearerAuth: - groups:read - bearerAuth: - groups:write - bearerAuth: - members:read - bearerAuth: - payments:read - bearerAuth: - reimbursements:read - bearerAuth: - reminders:read - bearerAuth: - store:read components: headers: X-Request-Id: description: >- Identifies the request; quote it to support. Also in the error body as `requestId`. schema: type: string RateLimit-Limit: description: Requests the token's budget for this kind of request allows per window. schema: type: integer RateLimit-Remaining: description: Requests left in the current window. schema: type: integer RateLimit-Reset: description: Seconds until the window resets. schema: type: integer Retry-After: description: Seconds to wait before retrying. schema: type: integer responses: BadRequest: description: >- Invalid input: a parameter or body field fails validation (`param` names it), the body isn't JSON, or a business rule refused the request. headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' content: application/json: schema: $ref: '#/components/schemas/Error' Unauthorized: description: Missing, malformed, expired or revoked token. headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' content: application/json: schema: $ref: '#/components/schemas/Error' Forbidden: description: The token lacks a required scope. headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' content: application/json: schema: $ref: '#/components/schemas/Error' NotFound: description: No such resource, or the token's organization can't see it. headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' content: application/json: schema: $ref: '#/components/schemas/Error' SyncExpired: description: >- Deletions newer than `updatedSince` (or the cursor) have been pruned (`sync_expired`). Resync the lists in full, then sync deletions from then on. headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' content: application/json: schema: $ref: '#/components/schemas/Error' RateLimited: description: Rate limited; see the `Retry-After` header. headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' Retry-After: $ref: '#/components/headers/Retry-After' content: application/json: schema: $ref: '#/components/schemas/Error' UnexpectedError: description: >- Any other failure, such as `internal_error` (500), as the `Error` envelope. A failure in front of the API (a gateway timeout, a request too large) may instead be plain text. headers: X-Request-Id: $ref: '#/components/headers/X-Request-Id' RateLimit-Limit: $ref: '#/components/headers/RateLimit-Limit' RateLimit-Remaining: $ref: '#/components/headers/RateLimit-Remaining' RateLimit-Reset: $ref: '#/components/headers/RateLimit-Reset' content: application/json: schema: $ref: '#/components/schemas/Error' text/plain: schema: type: string schemas: Error: type: object properties: error: type: object properties: code: description: >- A stable, machine-readable reason. One of `invalid_request` (400), `invalid_token` (401), `insufficient_scope` (403), `step_up_required` (403), `not_found` (404), `method_not_allowed` (405), `conflict` (409), `sync_expired` (410), `rate_limited` (429), `internal_error` (500), `provider_error` (502). New codes may be added; treat an unknown one by its HTTP status. type: string message: type: string param: type: string requiredScopes: type: array items: type: string requestId: type: string docsUrl: type: string required: - code - message - requestId - docsUrl required: - error securitySchemes: bearerAuth: type: http scheme: bearer description: >- A Dueflow access token: `dfp_` (personal) or `dfs_` (service). Permissions are the token's scopes intersected with the role ceiling, re-evaluated per request. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.