Reference · Menus

List online menus

GET/v1/sites/{siteId}/menus

A site's online menus, with their tabs and the products on each. A page at a time; retired ones only with includeInactive.

Needs Catalogue: read

Path

siteIdrequired
The site, from GET /v1/sites.
string

Query

limit
How many records to return, at most.
integer · ≥ 1 · ≤ 200 · default 50
cursor
nextCursor from the previous page. Omit for the first page.
string
updatedSince
Only records changed at or after this time (RFC 3339). For a sync, pass the time your previous sync started.
string · date-time
includeInactive
Include retired records (active false). Off by default.
boolean

Headers

Authorizationrequired
An API key from Automation > Access in the Dnero portal, sent as Authorization: Bearer <key>.
string

Responses

200OK
400Bad Requestbad_request invalid_cursor idempotency_key_required
401Unauthorizedmissing_key invalid_key key_expired +1 more
403Forbiddenkey_revoked assistant_key key_without_access +7 more
404Not Foundsite_not_found not_found
422Unprocessable Entityinvalid_request not_a_modifier_group
429Too Many Requestsrate_limited
500Internal Server Errorserver_error
502Bad Gatewayupstream_unavailable

200 OK

datarequired
The records, in a stable order.
array of objects
7 fields in each
- activerequired
  False for a retired menu.
  boolean
- coderequired
  The menu's code.
  string
- namerequired
  The menu's name, as customers see it.
  string
- orderrequired
  Where it sits among the site's menus, lowest first.
  integer
- orderTypesrequired
  The order types it serves, by code: a menu serving none appears nowhere.
  array of string
- tabsrequired
  Its tabs, in order.
  array of objects
  5 fields in each
  - coderequired
    The tab's code, within its menu.
    string
  - namerequired
    The tab's name.
    string
  - productsrequired
    The products on the tab, by code, in order.
    array of string
  - hoverImageUrl
    The picture shown under the cursor.
    string · uri
  - imageUrl
    The tab's picture.
    string · uri
- updatedAt
  When it last changed.
  string · date-time
nextCursor
Pass as cursor to get the next page. Absent on the last page.
string

curlJavaScriptPython

curl "https://api.dev.dnerohq.com/v1/sites/9a3c74c2-741e-48c3-ad9e-b137ec1c7243/menus" \
  -H "Authorization: Bearer $DNERO_API_KEY"

const response = await fetch('https://api.dev.dnerohq.com/v1/sites/9a3c74c2-741e-48c3-ad9e-b137ec1c7243/menus', {
  headers: {
    Authorization: `Bearer ${process.env.DNERO_API_KEY}`,
  },
})
const data = await response.json()

import os
import requests

response = requests.get(
    "https://api.dev.dnerohq.com/v1/sites/9a3c74c2-741e-48c3-ad9e-b137ec1c7243/menus",
    headers={"Authorization": f"Bearer {os.environ['DNERO_API_KEY']}"},
)
data = response.json()

200OKapplication/json

{
  "data": [
    {
      "active": true,
      "code": "0c4b2e81-7a3f-4d9e-b6c5-2f8a1d0e7b43",
      "name": "All day",
      "order": 1,
      "orderTypes": [
        "e2b7c4f9-3a1d-4c6e-9f80-5d2a7b1c4e38"
      ],
      "tabs": [
        {
          "code": "t-1f3a",
          "hoverImageUrl": "https://ucarecdn.com/5d7b2e9a-1c4f-4a86-9e03-b6f1a8c4d270/",
          "imageUrl": "https://ucarecdn.com/8c1e4a7d-2f5b-4d90-b3e6-0a9c7d2f5e18/",
          "name": "Coffee",
          "products": [
            "7b3e9c14-2a6f-4d08-8b5e-c1f4a7d2e936"
          ]
        }
      ],
      "updatedAt": "2026-10-20T03:15:00Z"
    }
  ],
  "nextCursor": "NmFkN2JjODU3ZWE1NzNiNGQ1NDEyNTg4"
}

400Bad Requestapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#bad_request",
  "title": "Bad Request",
  "status": 400,
  "detail": "The request could not be read, for example malformed JSON.",
  "code": "bad_request"
}

401Unauthorizedapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#missing_key",
  "title": "Unauthorized",
  "status": 401,
  "detail": "No API key was sent.",
  "code": "missing_key"
}

403Forbiddenapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#key_revoked",
  "title": "Forbidden",
  "status": 403,
  "detail": "The key was revoked or switched off in the Dnero portal.",
  "code": "key_revoked"
}

404Not Foundapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#site_not_found",
  "title": "Not Found",
  "status": 404,
  "detail": "The key does not reach that site, or there is no such site.",
  "code": "site_not_found"
}

422Unprocessable Entityapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#invalid_request",
  "title": "Unprocessable Entity",
  "status": 422,
  "detail": "The request was read but is not valid.",
  "code": "invalid_request"
}

429Too Many Requestsapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#rate_limited",
  "title": "Too Many Requests",
  "status": 429,
  "detail": "The key has used its requests for this minute.",
  "code": "rate_limited"
}

500Internal Server Errorapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#server_error",
  "title": "Internal Server Error",
  "status": 500,
  "detail": "Something went wrong on Dnero's side. It has been logged.",
  "code": "server_error"
}

502Bad Gatewayapplication/problem+json

{
  "type": "https://developers.dnerohq.com/guides/errors/#upstream_unavailable",
  "title": "Bad Gateway",
  "status": 502,
  "detail": "Something Dnero depends on did not answer in time.",
  "code": "upstream_unavailable"
}

Examples use this site's API host. Keep the key in $DNERO_API_KEY; never paste it into code.