---
title: "Firm permissions"
method: GET
path: "/firms/{hackford_id}/permissions"
tags: ["Firms"]
---

# Firm permissions

`GET /firms/{hackford_id}/permissions`

## Request

- Base URL: `https://api.hackforddata.com/v1`
- URL: `https://api.hackforddata.com/v1/firms/{hackford_id}/permissions`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer
  - HTTP bearer
  - API key in header `Authorization`
  - API key in cookie `sessionid`

Return FCA firm permission rows for one canonical firm. Results are current permissions by default and include source limitations where FCA fields are missing or not normalised.

## Path parameters

- `hackford_id` string, required

## Query parameters

- `activity` string
- `customer_type` string
- `investment_type` string
- `page` integer
- `page_size` integer
- `permission_group` string
- `source_authority` string
- `status` string

## Response `200`

- FirmPermissionsResponse
  - `firm` FirmPermissionFirm, required
    - `hackford_id` string, required
    - `display_name` string, required
    - `canonical_url` string, required
    - `identifiers` FirmIdentifiers, required
      - `fca_frn` string, nullable
      - `sec_crd` string, nullable
      - `sec_file` string, nullable
      - `cik` string, nullable
      - `companies_house` string, nullable
      - `lei` string, nullable
  - `count` integer, required
  - `page` integer, required
  - `page_size` integer, required
  - `next` string, nullable, required
  - `previous` string, nullable, required
  - `results` FirmPermissionRow[], required
    - `source_authority` string, required
    - `permission` string, nullable, required
    - `status` string, nullable, required
    - `regulated_activity` string, nullable, required
    - `permission_group` string, nullable, required
    - `investment_type` string, nullable, required
    - `customer_type` string, nullable, required
    - `limitation_requirement_text` string, nullable, required
    - `effective_from` string, date, nullable, required
    - `effective_to` string, date, nullable, required
    - `is_current` boolean, required
    - `raw_source_text` string, nullable, required
    - `source_last_refreshed` string, date, nullable, required
    - `as_at` string, date, nullable, required
  - `source` object, required
  - `limitations` string[], required

## Other responses

- `404`
- `429`

---

[API](https://skmtc.dev/hackforddata/apis/hackford-public-api.md) · [All operations](https://skmtc.dev/hackforddata/apis/hackford-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hackforddata/apis/hackford-public-api/revisions/ac8a53f8beb0?raw)