---
title: "List Identity Controls"
method: GET
path: "/v2/identity/controls"
tags: ["Identity Controls"]
---

# List Identity Controls

`GET /v2/identity/controls`

List identity controls associated with an identity.

## Query parameters

- `identity_id` string, required
- `include_deleted` boolean
- `limit` integer
- `page_cursor` string

## Response `200`

A successful response.

- ListIdentityControlsResponse
  - `items` IdentityControl[] — The list of identity controls.
    - `id` string, required
    - `type` 'SELL_ONLY' | 'CLOSED' | 'FROZEN' | 'DORMANT', required
    - `set_by` 'SET_BY_PAXOS' | 'SET_BY_CLIENT', required
    - `is_overridable` boolean
    - `reason_code` 'OTHER' | 'END_USER_REQUEST' | 'INACTIVITY' | 'COMPLIANCE_KYC' | 'COMPLIANCE_EDD' | 'COMPLIANCE_SCREENING' | 'COMPLIANCE_INVESTIGATION' | 'COMPLIANCE_INCOMPLETE' | 'RISK_FRAUD' | 'LEGAL_ORDER' | 'ADMINISTRATIVE' — - OTHER: Miscellaneous reason not captured by existing categories. - END_USER_REQUEST: Control applied at the end user's request. - INACTIVITY: Control applied due to prolonged inactivity in accordance with dormancy or lifecycle management policies. - COMPLIANCE_KYC: Control applied due to unmet KYC requirements, including missing, expired, failed, or unresponsiveness to refresh obligations. - COMPLIANCE_EDD: Control applied due to Enhanced Due Diligence (EDD) requirements, including failure to complete EDD reviews, provide requested information, or satisfy heightened risk assessment criteria. - COMPLIANCE_SCREENING: Control applied as a result of sanctions, politically exposed person (PEP), or adverse media screening hits. - COMPLIANCE_INVESTIGATION: Control applied while an identity is under active compliance, risk, or regulatory investigation, including reviews triggered by monitoring alerts or external inquiries. - COMPLIANCE_INCOMPLETE: Control applied because the onboarding process was not successfully completed, including failure to respond to requests for information or provide required documentation. - RISK_FRAUD: Control applied due to suspected or confirmed fraud, abuse, or security risk, including account compromise, transaction fraud, or policy violations. - LEGAL_ORDER: Control applied to comply with a legal, regulatory, or law-enforcement directive, including court orders, asset preservation requests, or regulatory instructions. - ADMINISTRATIVE: Control applied for operational or platform-initiated reasons not attributable to the end user or compliance failure, such as system remediation or account restructuring.
    - `reason` string
    - `created_at` string, date-time, required
    - `deleted_at` string, date-time
  - `next_page_cursor` string — Cursor token for fetching the next page. Empty if there are no more pages.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found

---

[API](https://skmtc.net/paxos/apis/paxos-api.md) · [All operations](https://skmtc.net/paxos/apis/paxos-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/paxos/paxos-api/revisions/0687ca8c9a8d/schema)