---
title: "List Apple Messages for Business submissions"
method: GET
path: "/v1/amb/business-accounts/{business_account_id}/submissions"
tags: ["amb-business-accounts"]
---

# List Apple Messages for Business submissions

`GET /v1/amb/business-accounts/{business_account_id}/submissions`

## Request

- Base URL: `https://us1.platform.bird.com`
- URL: `https://us1.platform.bird.com/v1/amb/business-accounts/{business_account_id}/submissions`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `bird_session`

Returns review attempts with frozen evidence for this business, newest first, with fresh private evidence URLs.

## Path parameters

- `business_account_id` string, required

## Query parameters

- `sort` 'created_at': Field used to order the records.
- `order` 'asc' | 'desc': Sort direction, ascending or descending.
- `limit` integer
- `starting_after` string
- `ending_before` string
- `include_total` boolean

## Headers

- `X-Workspace-Id` string
- `X-Organization-Id` string

## Response `200`

A page of submission attempts, newest first.

- AMBBusinessAccountSubmissionList
  - `data` AMBBusinessAccountSubmission[], required
    - `id` string, required
    - `business_account_id` string, required
    - `apple_business_id` string, uuid, required: The Apple business UUID frozen when this attempt was submitted.
    - `name` string, required: The customer-supplied Bird account name frozen when this attempt was submitted.
    - `readiness_attachment` Attachment, required: A supporting document uploaded for compliance answers or SMS registrations, including number ownership evidence, 10DLC campaign evidence and toll-free verification opt-in screenshots. Reference its ID from the relevant answer or registration attachment field to submit it as evidence.
      - `created_at` string, date-time, required
      - `updated_at` string, date-time, required
      - `id` string, required
      - `filename` string, required: The uploaded file's name.
      - `content_type` string, required: The file's content type, determined from its contents.
      - `size_bytes` integer, required: The file's size in bytes.
      - `description` string: A short note describing what the file shows.
      - `status` 'draft' | 'attached', required: Lifecycle of an attachment. `draft` is a file that has been uploaded but nothing has been registered or submitted with it yet, and it is discarded at its `expires_at`. `attached` means at least one registration has cited it, so it is kept permanently and can no longer be deleted.
      - `download_url` string, uri, required: Short-lived signed URL for downloading or previewing the attachment. Valid for 24 hours from when the resource was fetched; request a fresh resource to obtain a new URL after expiry. Do not cache beyond `download_url_expires_at`. Registration authorities (10DLC and toll-free carriers) retrieve evidence via a separate, longer-lived token; this URL is not that token.
      - `preview_url` string, uri: Optional signed URL for inline viewing on an isolated storage origin. Valid for one hour; fetch the attachment again to refresh it.
      - `download_url_expires_at` string, date-time, required: When `download_url` expires. Both fields are always present; the server returns an error rather than omitting them.
      - `expires_at` string, date-time, nullable, required: When this attachment is discarded if nothing is registered or submitted with it. Null once its status is `attached`.
    - `use_cases_attachment` Attachment, required: A supporting document uploaded for compliance answers or SMS registrations, including number ownership evidence, 10DLC campaign evidence and toll-free verification opt-in screenshots. Reference its ID from the relevant answer or registration attachment field to submit it as evidence.
      - `created_at` string, date-time, required
      - `updated_at` string, date-time, required
      - `id` string, required
      - `filename` string, required: The uploaded file's name.
      - `content_type` string, required: The file's content type, determined from its contents.
      - `size_bytes` integer, required: The file's size in bytes.
      - `description` string: A short note describing what the file shows.
      - `status` 'draft' | 'attached', required: Lifecycle of an attachment. `draft` is a file that has been uploaded but nothing has been registered or submitted with it yet, and it is discarded at its `expires_at`. `attached` means at least one registration has cited it, so it is kept permanently and can no longer be deleted.
      - `download_url` string, uri, required: Short-lived signed URL for downloading or previewing the attachment. Valid for 24 hours from when the resource was fetched; request a fresh resource to obtain a new URL after expiry. Do not cache beyond `download_url_expires_at`. Registration authorities (10DLC and toll-free carriers) retrieve evidence via a separate, longer-lived token; this URL is not that token.
      - `preview_url` string, uri: Optional signed URL for inline viewing on an isolated storage origin. Valid for one hour; fetch the attachment again to refresh it.
      - `download_url_expires_at` string, date-time, required: When `download_url` expires. Both fields are always present; the server returns an error rather than omitting them.
      - `expires_at` string, date-time, nullable, required: When this attachment is discarded if nothing is registered or submitted with it. Null once its status is `attached`.
    - `video_attachment` Attachment, required: A supporting document uploaded for compliance answers or SMS registrations, including number ownership evidence, 10DLC campaign evidence and toll-free verification opt-in screenshots. Reference its ID from the relevant answer or registration attachment field to submit it as evidence.
      - `created_at` string, date-time, required
      - `updated_at` string, date-time, required
      - `id` string, required
      - `filename` string, required: The uploaded file's name.
      - `content_type` string, required: The file's content type, determined from its contents.
      - `size_bytes` integer, required: The file's size in bytes.
      - `description` string: A short note describing what the file shows.
      - `status` 'draft' | 'attached', required: Lifecycle of an attachment. `draft` is a file that has been uploaded but nothing has been registered or submitted with it yet, and it is discarded at its `expires_at`. `attached` means at least one registration has cited it, so it is kept permanently and can no longer be deleted.
      - `download_url` string, uri, required: Short-lived signed URL for downloading or previewing the attachment. Valid for 24 hours from when the resource was fetched; request a fresh resource to obtain a new URL after expiry. Do not cache beyond `download_url_expires_at`. Registration authorities (10DLC and toll-free carriers) retrieve evidence via a separate, longer-lived token; this URL is not that token.
      - `preview_url` string, uri: Optional signed URL for inline viewing on an isolated storage origin. Valid for one hour; fetch the attachment again to refresh it.
      - `download_url_expires_at` string, date-time, required: When `download_url` expires. Both fields are always present; the server returns an error rather than omitting them.
      - `expires_at` string, date-time, nullable, required: When this attachment is discarded if nothing is registered or submitted with it. Null once its status is `attached`.
    - `status` 'submitted' | 'in_review' | 'approved' | 'rejected', required: State of this review attempt. Later suspension or disconnection does not change an approved attempt.
    - `status_reason` string, nullable, required: Review feedback on this attempt, such as the reason Apple rejected it. May contain basic Markdown, such as emphasis and lists.
    - `created_at` string, date-time, required
    - `next` NextAction[]: Read the parent business account for current eligibility and next actions. Present on create responses and each customer submission-list item; historical attempts do not establish current account state.
      - `kind` string, required: What you do about this step. - `operation`: call the operation named in `operation`, then read again. - `external`: act somewhere this API does not reach, then read again. - `wait`: nothing is asked of you, so read again later. - `terminal`: nothing you do resolves this, so stop retrying. Tolerate a value you do not recognize: show the `description` and offer no action.
      - `description` string, required: A short, human-readable label for the step, suitable for display.
      - `operation` string: The operationId to call. Present only when `kind` is `operation`. The operation's own schema says how to call it; this says only which one, and what to address it with.
      - `params` object: The parameters that address the operation, by name: `{"sender_id": "…"}` for an operation on `/v1/sms/senders/{sender_id}/requirements`. A parameter the operation takes in its query string is given the same way, so an operation addressed as `?subject_id=` carries `{"subject_id": "…"}`. Every parameter the call needs is here, whether its value came from the thing you were acting on or is fixed for this step, so you can make the call from this object alone. Present only when `kind` is `operation` and the operation names a subject. A request body, when the operation takes one, is described by the operation's own schema and never appears here.
      - `url` string, uri: A URL to open. Present only when `kind` is `external`, and only when the step has one. An external step whose `description` says to go and do something with no URL to open is normal.
    - `updated_at` string, date-time, required
  - `next_cursor` string, nullable, required: Cursor for the next page. Pass back as `starting_after` to advance forward. `null` when no next page exists.
  - `prev_cursor` string, nullable, required: Cursor for the previous page. Pass back as `ending_before` to step backward. `null` when no previous page exists.
  - `refresh_cursor` string, nullable, required: Refresh anchor, the first row of this response. Pass back as `ending_before` to fetch what precedes it in the current sort order. On a newest-first sort those are the items that have appeared since; on any other sort they are the items that sort earlier, so refreshing such a list means re-fetching it instead. Non-`null` whenever `data` is non-empty; `null` only on an empty page. Distinct from `prev_cursor`.
  - `total` integer, nullable: Total number of items matching the request's filters across all pages. Present only when `include_total=true` was passed; otherwise `null`.

## Other responses

- `400`: Bad request
- `401`: Authentication required
- `403`: Insufficient permissions
- `404`: Resource not found
- `422`: The request has invalid field values, violates a business rule, or carries a query parameter the endpoint does not declare. Field validation errors use `type: validation_error` and include the affected fields in `details`. Business-rule errors identify the failed rule in `type`.
- `429`: Rate limit exceeded
- `500`: Internal server error

---

[API](https://skmtc.dev/messagebird/apis/bird-api.md) · [All operations](https://skmtc.dev/messagebird/apis/bird-api/llms.txt) · [OpenAPI document](https://skmtc.dev/messagebird/apis/bird-api/revisions/3e2a50466454?raw)