Developers › API reference › Orders
GET /api/v1/orders/{id}/fills
Simulated fills of an order.
- Scope
orders:read - operationId
ordersFills
The token needs the scope orders:read, and the person or service account behind it needs the matching privileges and account permissions, exactly as on the screens. See Scopes.
Request
GET /api/v1/orders/{id}/fills
Path parameters
| Name | Description | Example |
|---|---|---|
id | The id of the order. | 5301 |
Headers
| Header | Required | Value |
|---|---|---|
Authorization | yes | Bearer <token>: an OAuth access token (vat_…) or a personal access token (vpt_…). Get a token |
Examples
Keep the token in an environment variable (VESTORIS_TOKEN), never in the script.
curl
curl "https://vestoris.com/api/v1/orders/5301/fills" \
-H "Authorization: Bearer $VESTORIS_TOKEN"
Python (requests)
import os, requests
r = requests.get(
"https://vestoris.com/api/v1/orders/5301/fills",
headers={
"Authorization": f"Bearer {os.environ['VESTORIS_TOKEN']}",
},
timeout=30,
)
r.raise_for_status() # errors are application/problem+json with a stable "code"
print(r.json())
JavaScript (fetch)
const res = await fetch("https://vestoris.com/api/v1/orders/5301/fills", {
method: "GET",
headers: {
Authorization: `Bearer ${process.env.VESTORIS_TOKEN}`,
},
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.detail}`); // problem+json
console.log(data);
Response
200 OK, application/json: FillList. Rate-limit headers: RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset.
Response fields
| Field | Type | Description |
|---|---|---|
order_id | id (string) | The order's id. |
data | list of Fill | The records of this page or list. |
data[].id | id (string) | The record's id (a string of digits). |
data[].order_id | id (string) | The order's id. |
data[].quantity | decimal string or null | Shares in this fill. |
data[].price | decimal string or null | Fill price (simulated). |
data[].arrival_price | decimal string or null | The simulated price when the order was released (the benchmark for slippage). |
data[].market_price | decimal string or null | The simulated market price at the fill. |
data[].slippage_bps | decimal string or null | Fill price against arrival price, in basis points (positive: worse). |
data[].sim_time | string | The simulated market time of the fill. |
data[].created_at | date-time or null | When it was created. |
data[].simulated | boolean | Always true: simulated data, paper trading. |
Example response
HTTP/1.1 200 OK
Content-Type: application/json
{
"order_id": "5301",
"data": [
{
"id": "1042",
"order_id": "5301",
"quantity": "450",
"price": "231.58",
"arrival_price": "231.45",
"market_price": "231.60",
"slippage_bps": "3.2",
"sim_time": "10:30",
"created_at": "2026-10-27T14:30:00Z",
"simulated": true
}
]
}
Example values. Your values depend on your firm's data; prices, orders and fills are simulated.
Status codes and errors
Errors are application/problem+json (RFC 9457) with a stable code to program against; the detail says what to fix. See Errors.
| Status | When | Problem codes |
|---|---|---|
| 200 | Success | |
| 400 | The request is malformed | invalid_request |
| 401 | No token, or it is invalid or expired | invalid_token |
| 403 | The token lacks the scope, or the person or service account behind it lacks the privilege or account permission | insufficient_scope forbidden ip_not_allowed |
| 404 | Not found, or not visible to you (the API never confirms what you may not see) | not_found |
| 429 | Rate limited: wait for Retry-After seconds | rate_limited |
{
"type": "https://vestoris.com/developers/errors#validation_failed",
"title": "Validation failed",
"status": 422,
"detail": "Quantity must be greater than zero.",
"code": "validation_failed",
"instance": "/api/v1/orders/5301/fills"
}
On the screens
The same thing in the app is explained in: