---
title: "Create the authenticated user's redacted corporate legal report"
method: POST
path: "/api/v1/empresa/{slug}/informe-legal"
tags: ["Legal", "Companies", "User"]
---

# Create the authenticated user's redacted corporate legal report

`POST /api/v1/empresa/{slug}/informe-legal`

Account and credit-entitlement surface for a legal entity only. The server owns beta/pricing policy and a daily idempotency key scoped to user, company and UTC date; clients cannot choose price or entitlement. Every report is recursively PII-redacted before egress. Documentary events and citations do not prove wrongdoing, solvency, current status, identity of a natural person or completeness, and this informational report is not legal advice or an official certificate. Unknown or unauthorized source policy, natural-person subjects and missing helpers fail closed. The JSON body is capped at 32 KiB and accepts only the CSRF fallback.

## Path parameters

- `slug` string, required

## Headers

- `X-CSRF-Token` string, required

## Request body

- LegalReportRequest — The body carries only the CSRF fallback. Entitlement, pricing, beta status and the daily idempotency key are server-owned.
  - `csrf` string — Body fallback; prefer X-CSRF-Token.

## Response `200`

Redacted documentary corporate report and server-owned charging result

- LegalReportResponse
  - `ok` true, required
  - `company` object, required
    - `slug` string, required
    - `name` string, required
  - `charged` integer, required
  - `beta_free` boolean, required
  - `already_paid` boolean, required
  - `balance_after` integer, nullable, required
  - `report` LegalReportDocument, required
    - `state` object, nullable, required
    - `axes` LegalReportAxis[], required
      - `axis_id` string, required
      - `label` string, required
      - `present` boolean, required
      - `count` integer, required
      - `first_date` string, nullable
      - `last_date` string, nullable
      - `norm_slug` string, nullable
      - `norm_articulos` string, nullable
      - `concepto_slug` string, nullable
      - `anchor` string, nullable
      - `official_url` string, uri, nullable
      - `official_label` string, nullable
      - `is_cendoj` boolean
      - `subaxes` object[]
      - `items` JsonValue[]
        - union — A JSON value used only inside explicitly documented extension maps.
          - JsonValue[]
          - object
    - `totals` object, required
      - `axes_present` integer, required
      - `events_total` integer, required
      - `norms_cited` string[], required

## Other responses

- `400` — Invalid request
- `401` — Authentication required (no active session)
- `402` — Insufficient credits or the idempotent charge could not be completed
- `403` — Invalid or missing CSRF token
- `404` — Corporate subject not found or the slug is classified as a natural-person subject
- `413` — Request body exceeds 32 KiB
- `429` — Rate limit exceeded
- `503` — Action-budget storage, legal source policy, report helper, account schema or credit ledger unavailable; generation fails closed

---

[API](https://skmtc.net/openmercantil/apis/openmercantil-public-api.md) · [All operations](https://skmtc.net/openmercantil/apis/openmercantil-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/openmercantil/openmercantil-public-api/revisions/996f96a11758/schema)