---
title: "Get an external party account"
method: GET
path: "/external-party-accounts/{externalPartyAccountId}"
tags: ["External Party Accounts"]
---

# Get an external party account

`GET /external-party-accounts/{externalPartyAccountId}`

Get an external party account by ID

## Path parameters

- `externalPartyAccountId` string, required — External party account ID (epa_*).

## Query parameters

- `customerPartyId` string — Defaults to your party. To act for another party, pass the ID of a party that has authorized you to act on its behalf.

## Headers

- `X-Instance-ID` string, nullable

## Response `200`

Successful Response

- object
  - `data` object, required
    - `id` string, required
    - `type` 'external_party_account', required — Resource type.
    - `attributes` object, required
      - `accountDetails` object, required — Type-specific account details.
        - `type` 'us_bank_account', required — Account details type.
        - `accountType` 'checking' | 'savings', required — Bank account type.
        - `last4` string, required — Last four account number digits.
        - `mask` string, required — Masked account number.
      - `validationState` 'pending' | 'validated' | 'failed', required — Account validation state. `pending` when validation could not complete at creation; it resolves asynchronously to `validated` or `failed`.
      - `supportedRails` string[], required — Advisory list of payment rails this account is expected to accept. Refreshed periodically from the payment network; the authoritative check happens when a payment is created.
      - `createdAt` string, required — ISO creation timestamp.
      - `updatedAt` string, required — ISO update timestamp.
    - `relationships` object, required
      - `externalParty` object, required — External party that owns the account.
        - `data` object, required — Related resource identifier.
          - `type` 'external_party', required
          - `id` string, required

## Other responses

- `400` — Validation Error
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found. Returned when the resource does not exist, or when it exists but is not accessible to your account. The two cases are intentionally indistinguishable, so that resource IDs cannot be enumerated by probing.
- `409` — Conflict
- `422` — Validation Error. The response contains one error object for each invalid request value.
- `428` — Precondition Required
- `429` — Too Many Requests
- `500` — Internal Server Error
- `501` — Not Implemented
- `502` — Bad Gateway
- `503` — Service Unavailable

## Changes

- **2026-09-04** `3d0bfe344af2` — 1 info
  - added the required property `data/attributes/supportedRails` to the response with the `200` status
- **2026-09-02** `c7c12da5915f` — 12 info
  - added the optional property `errors/items/meta/limitScope` to the response with the `400` status
  - added the optional property `errors/items/meta/limitScope` to the response with the `401` status
  - added the optional property `errors/items/meta/limitScope` to the response with the `403` status
  - added the optional property `errors/items/meta/limitScope` to the response with the `404` status
  - …8 more
- **2026-08-27** `359d267dca88` — 1 info
  - deleted the `header` request parameter `X-Agent-ID` with deprecation
- **2026-08-23** `b1ad79e918ac` — 1 info
  - `header` request parameter `X-Agent-ID` was deprecated
- **2026-08-22** `efd3da471398` — 1 info
  - added the new optional `query` request parameter `customerPartyId`

[Full history](https://skmtc.dev/natural/apis/natural-api/changes/external-party-accounts/:externalPartyAccountId/get.md)

---

[API](https://skmtc.dev/natural/apis/natural-api.md) · [All operations](https://skmtc.dev/natural/apis/natural-api/llms.txt) · [OpenAPI document](https://skmtc.dev/natural/apis/natural-api/revisions/1197c1fb1ef2?raw)