---
title: "GET /api/activity/address-list/match/"
method: GET
path: "/api/activity/address-list/match/"
tags: ["activity"]
---

# GET /api/activity/address-list/match/

`GET /api/activity/address-list/match/`

Look up on-device address hashes against the caller's organization known-address list. The caller sends one ``hash`` per match granularity (``exact`` / ``building`` / ``street``, computed on-device); the endpoint returns the **finest** matched level's entry — its ``identifier``, ``entry_type`` (fraud/employee), and matched ``level`` — and 404 on a miss. The raw address never leaves the browser; only the hashes are sent. Gated by the ``activity-tracking`` flag and scoped to the caller's organization; enablement is driven by the org's activity policy (``security.addressFraudRules``).

## Query parameters

- `organization` string, uuid, required
- `hash` string[], required

## Response `200`

---

[API](https://skmtc.dev/pixiebrix/apis/pixiebrix-api.md) · [All operations](https://skmtc.dev/pixiebrix/apis/pixiebrix-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/pixiebrix/pixiebrix-api/revisions/941ab9eb01d6/schema)