v2

latestOpenAPI 3.1.0Source-specific upstream terms; see response catalog metadata2026-07-26139203447.9 KB

User

Run an authenticated KYC documentary lookup

MAX/Enterprise account operation. Requires a declared legitimate purpose, records an audit entry and never creates a public person profile. DNI/NIE belongs only in the encrypted request body, never in URL, logs or public API surfaces.

post/api/v1/persons/lookup

Headers

X-CSRF-Tokenstring required

Fresh token returned by GET /api/v1/user/me for this authenticated session.

Request body

dni_or_niestring required

DNI/NIE supplied for this authenticated KYC request; never use it in public company/person routes.

finalidadstring required

Declared legitimate purpose recorded in the account audit log.

Response

Documentary lookup result with disclaimer and usage

okboolean required

statusstring required

errorstring nullable

messagestring nullable

query_redactedstring nullable

query_typestring nullable

matches_countinteger

sources_matchedstring[]

finalidadstring nullable

credits_chargedinteger

request_idstring required

disclaimerstring nullable

correction_urlstring nullable

audit_urlstring nullable