curl --fail-with-body "https://maatstays.wtf/v1/finance/penalties?page_size=100" \
  -H "Authorization: Bearer $MAAT_PARTNER_TOKEN"

const headers = { Authorization: `Bearer ${process.env.MAAT_PARTNER_TOKEN}` };

for (let page = 1; ; page += 1) {
    const url = new URL('https://maatstays.wtf/v1/finance/penalties');
    url.searchParams.set('page', String(page));
    url.searchParams.set('page_size', '100');

    const res = await fetch(url, { headers });
    const body = await res.json();
    if (!res.ok) throw new Error(`${body.code}: ${body.detail}`);

    for (const penalty of body.items) {
        console.log(penalty.penalty_id, penalty.status, penalty.outstanding.value);
    }
    if (!body.has_more) break;
}

import os

import requests

headers = {"Authorization": f"Bearer {os.environ['MAAT_PARTNER_TOKEN']}"}

page = 1
while True:
    res = requests.get(
        "https://maatstays.wtf/v1/finance/penalties",
        headers=headers,
        params={"page": page, "page_size": 100},
        timeout=30,
    )
    body = res.json()
    if res.status_code >= 400:
        raise RuntimeError(f"{body['code']}: {body.get('detail')}")

    for penalty in body["items"]:
        print(penalty["penalty_id"], penalty["status"], penalty["outstanding"]["value"])
    if not body["has_more"]:
        break
    page += 1

package main

import (
    "encoding/json"
    "fmt"
    "log"
    "net/http"
    "net/url"
    "os"
    "strconv"
)

type money struct {
    Value    string `json:"value"`
    Currency string `json:"currency"`
}

type penalty struct {
    PenaltyID   string `json:"penalty_id"`
    Status      string `json:"status"`
    Outstanding money  `json:"outstanding"`
}

type page struct {
    Items   []penalty `json:"items"`
    HasMore bool      `json:"has_more"`
}

func main() {
    token := os.Getenv("MAAT_PARTNER_TOKEN")

    for pageNum := 1; ; pageNum++ {
        query := url.Values{}
        query.Set("page", strconv.Itoa(pageNum))
        query.Set("page_size", "100")

        req, _ := http.NewRequest(http.MethodGet,
            "https://maatstays.wtf/v1/finance/penalties?"+query.Encode(), nil)
        req.Header.Set("Authorization", "Bearer "+token)

        res, err := http.DefaultClient.Do(req)
        if err != nil {
            log.Fatal(err)
        }

        var body page
        err = json.NewDecoder(res.Body).Decode(&body)
        res.Body.Close()
        if err != nil {
            log.Fatalf("list failed: %v", err)
        }
        if res.StatusCode >= 400 {
            log.Fatalf("list failed: %d", res.StatusCode)
        }

        for _, p := range body.Items {
            fmt.Println(p.PenaltyID, p.Status, p.Outstanding.Value)
        }
        if !body.HasMore {
            break
        }
    }
}