OPopenmercantil
User

Run an authenticated KYC documentary lookup

Changed on

MAX/Enterprise account operation. Requires a declared legitimate purpose, records an audit entry and never creates a public person profile. DNI/NIE belongs only in the encrypted request body, never in URL, logs or public API surfaces.

post/api/v1/persons/lookup

Request

Headers

X-CSRF-Tokenstring required

Fresh token returned by GET /api/v1/user/me for this authenticated session.

Request body

dni_or_niestring required

DNI/NIE supplied for this authenticated KYC request; never use it in public company/person routes.

finalidadstring required

Declared legitimate purpose recorded in the account audit log.

Response

Documentary lookup result with disclaimer and usage

okboolean required
statusstring required
errorstring nullable
messagestring nullable
query_redactedstring nullable
query_typestring nullable
matches_countinteger
sources_matchedstring[]
finalidadstring nullable
credits_chargedinteger
request_idstring required
disclaimerstring nullable
correction_urlstring nullable
audit_urlstring nullable

Changes