List KYB verifications

curl --request GET \
  --url https://api.example.com/api/v4/kyb/verifications \
  --header 'ds-api-token: <api-key>'

const options = {method: 'GET', headers: {'ds-api-token': '<api-key>'}};

fetch('https://api.example.com/api/v4/kyb/verifications', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/api/v4/kyb/verifications",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "ds-api-token: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/api/v4/kyb/verifications"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("ds-api-token", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/v4/kyb/verifications")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["ds-api-token"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "data": [
    {
      "id": "019f179b-0fa7-72c8-818e-819652540477",
      "verification_id": "019f17a0-5b3d-72c8-818e-819652540900",
      "public_id": "KYBC8274B9CF4907859",
      "organization_id": "o6e501dc4d3c6d9a4",
      "applicant_id": "019f1383-8f38-7d31-b921-39310a19b444",
      "external_id": "bolt-merchant-123",
      "company_name": "Acme Holdings Inc.",
      "country": "US",
      "status": "under_review",
      "stage": "manual_review",
      "is_sandbox": false,
      "created_at": "2026-07-01T08:10:00Z",
      "submitted_at": "2026-07-01T08:15:00Z",
      "last_activity_at": "2026-07-01T08:15:00Z",
      "company": {
        "legal_name": "Acme Holdings Inc.",
        "form_type": "US - Limited Liability Company (LLC)",
        "entity_type": "Limited Liability Company (LLC)",
        "registration_type": "EIN",
        "registration_number": "16-1782204",
        "country": "US",
        "state": "NY",
        "representative_name": "Joe Marrano",
        "representative_email": "joe@acme.com"
      },
      "form_progress": {
        "sections_completed": 7,
        "sections_total": 7,
        "sections": [
          {
            "key": "business",
            "title": "Business details",
            "state": "completed"
          },
          {
            "key": "registration",
            "title": "Business registration",
            "state": "completed"
          },
          {
            "key": "address_contact",
            "title": "Business address",
            "state": "completed"
          },
          {
            "key": "representative",
            "title": "Representative",
            "state": "completed"
          },
          {
            "key": "people",
            "title": "Beneficial owners",
            "state": "completed"
          },
          {
            "key": "volume_banking",
            "title": "Volumes & banking",
            "state": "completed"
          },
          {
            "key": "documents",
            "title": "Documents",
            "state": "completed"
          }
        ]
      },
      "checks_summary": {
        "expected": 3,
        "completed": 3,
        "passed": 2,
        "review": 1,
        "failed": 0,
        "errored": 0,
        "checks": [
          {
            "type": "registry",
            "status": "completed",
            "severity": "low",
            "verdict": "active",
            "completed_at": "2026-07-01T08:16:05Z"
          },
          {
            "type": "tin",
            "status": "completed",
            "severity": "medium",
            "verdict": "not_issued",
            "completed_at": "2026-07-01T08:16:07Z"
          },
          {
            "type": "document_verification",
            "status": "completed",
            "severity": "low",
            "verdict": "verified",
            "completed_at": "2026-07-01T08:16:31Z"
          }
        ]
      }
    }
  ],
  "has_next": true
}

KYB Verifications

List KYB verifications

Server-to-server (API key) twin of the dashboard KYB verifications list: same envelope and per-row schema, the only difference is tenancy — the organization comes from the API key (not a path param) and sandbox from the key / the is_sandbox query param.

Paginated list of KYB verifications for the organization, mirroring the KYC (docver) verifications list. Each row carries the table columns (company name, status, decision, risk) PLUS the expanded-row blocks: company (Company/Application cards), form_progress (widget stepper), checks_summary (checks badges + N/M progress) and stage — so the expanded row renders without a detail round-trip. Each row’s id is the KYB CASE id — use it to drill in via GET /api/v4/kyb/verifications/.

Vocabularies. status (stored case lifecycle): draft → under_review (Submit locked the form) → the pipeline writes a terminal status from the risk score: approved (low) | manual_review (medium) | rejected (high) | failed (checks could not be scored). A compliance officer’s decision writes approved_manually / rejected_manually (the _manually suffix marks a reviewer-set status). remediation_requested is stamped when a remediation ticket is raised. stage (derived, expanded-row header): collecting_data | running_checks | manual_review | in_remediation | completed. checks_summary.checks[].type: registry | tin | document_verification | doc_manipulation | aml_company | aml_person | cross_check (the last four appear as their pipeline steps ship). checks[].status (execution): pending | completed | failed | skipped | timeout — pending rows carry no result/verdict. checks[].result (normalized outcome — drives the badge COLOR and the passed/review/failed counters): clear, not_applicable → passed (green); warning, inconclusive → review (yellow); failed → failed (red). checks[].verdict is NOT an enum — it is the provider’s normalized verdict to render verbatim as the badge TEXT (registry: Active/Dissolved/not_found/…; tin: TIN Matched/Did Not Match/irs_code_<N>; document_verification: VERIFIED/NOT_VERIFIED; doc_manipulation later: AUTHENTIC/SUSPICIOUS/LIKELY_FORGED). form_progress.sections[].state: completed | current | pending, plus action_required on the synthetic kyc step when the representative’s KYC came back failed (that one is NOT a remediation). It always describes the ORIGINAL application; a live round has its own stepper in form_progress_remediation, covering only the sections it asks about, whose entries are completed | in_remediation. checks_summary likewise stays the run a remediation interrupted, and checks_summary_remediation is the run its re-submit earned: that one is absent for the whole time the case sits in in_remediation, because no such run exists yet. risk_level (Low|Medium|High) comes from the business_risk_score severity once it runs, else null (render ‘Not scored’). risk_score/decision (the full numeric RiskResult) stay null — the KYB score is a level, not a number; the stored status carries the decision.

GET

api

kyb

verifications

List KYB verifications

curl --request GET \
  --url https://api.example.com/api/v4/kyb/verifications \
  --header 'ds-api-token: <api-key>'

const options = {method: 'GET', headers: {'ds-api-token': '<api-key>'}};

fetch('https://api.example.com/api/v4/kyb/verifications', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/api/v4/kyb/verifications",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "ds-api-token: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/api/v4/kyb/verifications"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("ds-api-token", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/v4/kyb/verifications")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["ds-api-token"] = '<api-key>'

response = http.request(request)
puts response.read_body

{
  "data": [
    {
      "id": "019f179b-0fa7-72c8-818e-819652540477",
      "verification_id": "019f17a0-5b3d-72c8-818e-819652540900",
      "public_id": "KYBC8274B9CF4907859",
      "organization_id": "o6e501dc4d3c6d9a4",
      "applicant_id": "019f1383-8f38-7d31-b921-39310a19b444",
      "external_id": "bolt-merchant-123",
      "company_name": "Acme Holdings Inc.",
      "country": "US",
      "status": "under_review",
      "stage": "manual_review",
      "is_sandbox": false,
      "created_at": "2026-07-01T08:10:00Z",
      "submitted_at": "2026-07-01T08:15:00Z",
      "last_activity_at": "2026-07-01T08:15:00Z",
      "company": {
        "legal_name": "Acme Holdings Inc.",
        "form_type": "US - Limited Liability Company (LLC)",
        "entity_type": "Limited Liability Company (LLC)",
        "registration_type": "EIN",
        "registration_number": "16-1782204",
        "country": "US",
        "state": "NY",
        "representative_name": "Joe Marrano",
        "representative_email": "joe@acme.com"
      },
      "form_progress": {
        "sections_completed": 7,
        "sections_total": 7,
        "sections": [
          {
            "key": "business",
            "title": "Business details",
            "state": "completed"
          },
          {
            "key": "registration",
            "title": "Business registration",
            "state": "completed"
          },
          {
            "key": "address_contact",
            "title": "Business address",
            "state": "completed"
          },
          {
            "key": "representative",
            "title": "Representative",
            "state": "completed"
          },
          {
            "key": "people",
            "title": "Beneficial owners",
            "state": "completed"
          },
          {
            "key": "volume_banking",
            "title": "Volumes & banking",
            "state": "completed"
          },
          {
            "key": "documents",
            "title": "Documents",
            "state": "completed"
          }
        ]
      },
      "checks_summary": {
        "expected": 3,
        "completed": 3,
        "passed": 2,
        "review": 1,
        "failed": 0,
        "errored": 0,
        "checks": [
          {
            "type": "registry",
            "status": "completed",
            "severity": "low",
            "verdict": "active",
            "completed_at": "2026-07-01T08:16:05Z"
          },
          {
            "type": "tin",
            "status": "completed",
            "severity": "medium",
            "verdict": "not_issued",
            "completed_at": "2026-07-01T08:16:07Z"
          },
          {
            "type": "document_verification",
            "status": "completed",
            "severity": "low",
            "verdict": "verified",
            "completed_at": "2026-07-01T08:16:31Z"
          }
        ]
      }
    }
  ],
  "has_next": true
}

Authorizations

ds-api-token

string

header

required

API token passed in the request header.

Query Parameters

limit

integer

Page size (5–25, default 20).

page

integer

Zero-based page number.

is_sandbox

boolean

Sandbox scope (also inferred from the API key).

API documentation

KYB

KYT

List KYB verifications

Authorizations

Query Parameters

Response