---
title: "List sandbox bank staff"
method: GET
path: "/banks/current/staff"
tags: ["Banks"]
---

# List sandbox bank staff

`GET /banks/current/staff`

## Request

- Base URL: `https://platform-api.homejourney.sg/v1`
- URL: `https://platform-api.homejourney.sg/v1/banks/current/staff`
- Auth: HTTP bearer

Returns deterministic sandbox bank staff metadata when the authenticated automation client has `banks.staff.read`. External URL: `/v1/banks/current/staff`. Current Next.js implementation path: `/api/platform/v1/banks/current/staff`. This read-only route does not require `Idempotency-Key`; it returns staff role, branch, active-state, staff-isolation, redaction boundary, and blocked side-effect metadata only and never exposes staff contact fields, raw staff profiles, borrower tokens, bank secrets, raw MyInfo, credit bureau data, bank statements, raw document contents, callback signing secrets, provider calls, or enterprise ingress claims. Live bank staff directories and staff writes remain unavailable until promotion gates have REST, consent, audit, sandbox, callback, and operations evidence. Bank pilot posture remains information/referral and pre-approval only, recommendation and live bank-decision claims remain deferred, and partner-status publication remains private-first.

## Headers

- `X-Correlation-Id` string

## Response `200`

Sandbox bank staff metadata.

- PlatformBankStaffListResponse
  - `staff` PlatformBankStaffMember[], required
    - `id` string, required
    - `sandbox_fixture_id` string, required
    - `display_name` string, required
    - `role` 'relationship_manager' | 'checker', required
    - `team` 'mortgage_frontend_sandbox', required
    - `branch_code` string, required
    - `active` true, required
    - `partner_identity_required` true, required
    - `borrower_token_staff_actions_allowed` false, required
    - `raw_staff_profile_exposed` false, required
    - `contact_fields_exposed` false, required
    - `livemode` false, required
    - `updated_at` string, date-time, required
  - `staff_boundary` PlatformBankStaffReadBoundary, required
    - `sandbox_only` true, required
    - `staff_metadata_only` true, required
    - `bank_secrets_redacted` true, required
    - `contact_fields_redacted` true, required
    - `raw_staff_profile_redacted` true, required
    - `partner_identity_required` true, required
    - `staff_write_deferred` true, required
    - `live_staff_directory_deferred` true, required
    - `borrower_token_staff_actions_allowed` false, required
  - `staff_count` integer, required
  - `side_effects` PlatformBankSandboxSideEffects, required
    - `live_callback_sent` false, required
    - `email_sent` false, required
    - `sms_sent` false, required
    - `whatsapp_sent` false, required
    - `document_link_sent` false, required
    - `bank_system_write_performed` false, required
    - `payment_event_created` false, required
    - `production_webhook_sent` false, required
  - `livemode` false, required
  - `request_id` string, required

## Other responses

- `400`: Request validation failed.
- `401`: Missing or invalid platform API key.
- `403`: Credential, environment, or scope is not allowed.
- `404`: Platform API feature or resource is not available.
- `429`: Rate limit exceeded.
- `500`: Unexpected platform API failure.

---

[API](https://skmtc.dev/homejourney/apis/homejourney-platform-api.md) · [All operations](https://skmtc.dev/homejourney/apis/homejourney-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/homejourney/apis/homejourney-platform-api/revisions/a2c6fe063db1?raw)
