---
title: "List business documents"
method: GET
path: "/business/{business_token}/documents"
tags: ["Business"]
---

# List business documents

`GET /business/{business_token}/documents`

## Request

- Base URL: `https://api.masspay.io/v1.0.0`
- URL: `https://api.masspay.io/v1.0.0/business/{business_token}/documents`
- Auth: one of:
  - API key in header `Authorization`
  - API key in header `x-api-key`
- TypeScript: <https://skmtc.dev/masspay/apis/masspay-api/docs/business/:business_token/documents/get.ts> (a function with typed inputs; its response is checked against the schema)

This **GET** endpoint lists the documents on file for a business, oldest first: those sent with `POST /business` and those uploaded through `POST /business/{business_token}/documents`. <br> You must specify the `business_token` in the URL path. The caller must be the account that created the business, or the business itself using its own API key. <br> The response carries each document's token, type, file name, size and upload time, not the file itself.

## Response `200`

OK

- BusinessDocumentsResp
  - `business_token` string, required: The business the documents belong to.
  - `documents` BusinessDocumentResp[], required: The documents, in request order for an upload and oldest first for a listing.
    - `document_token` string, required: Token identifying the stored document.
    - `document_type` 'kyb_report' | 'articles_of_incorporation' | 'certificate_of_incorporation' | 'certificate_of_good_standing' | 'business_license' | 'operating_agreement' | 'bylaws' | 'ownership_structure' | 'proof_of_address' | 'bank_statement' | 'tax_document' | 'financial_statement' | 'other', required: The `document_type` it was submitted with.
    - `file_name` string, required: The file name it was submitted with, without any directory part.
    - `size_bytes` integer, required: Size of the decoded file in bytes.
    - `description` string: The `description` it was submitted with; absent when none was given.
    - `time_uploaded` string, date-time, required: When the document was stored, ISO 8601, UTC.

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: You do not have necessary permissions for the resource
- `404`: Business not found: the token is unknown, or the business was neither created by your account nor is your own
- `500`: Internal Server Error
- `504`: Gateway Timeout

## Changes

- **2026-11-03** `f9fa41b7c45c`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/masspay/apis/masspay-api/changes/business/:business_token/documents/get.md)

---

[API](https://skmtc.dev/masspay/apis/masspay-api.md) - [All operations](https://skmtc.dev/masspay/apis/masspay-api/llms.txt) - [OpenAPI document](https://skmtc.dev/masspay/apis/masspay-api/revisions/f9fa41b7c45c?raw)