@creece, do you have a custom admin role minus the 2FA permissions that you can use to confirm that it's a permissions issue? Normally I go from too many permissions and then start to remove everything until it breaks...

logging into the UI via the role i have, it lets me look at both the custom transaction and the invoices just fine... for whatever reason it just doesn't like it via the rest request