---
title: "GET /api/company-documents/"
method: GET
path: "/api/company-documents/"
tags: ["Company Documents"]
---

# GET /api/company-documents/

`GET /api/company-documents/`

List company documents as the caller may see them. `isWithNetworkDocuments=true` returns their own documents plus what the network made visible to them; `isNetworkShared=false` returns the network documents they have no access to yet. With neither, the caller's own company's documents. A document the caller cannot open comes back as a placeholder: `name` and every file field blanked, and a `permission` object saying whether access was requested. `meta.totalCount` counts placeholders even when `onlyWithGrantedPermission=true` leaves them out of `data`.

## Query parameters

- `page` integer
- `count` integer
- `sort` string
- `q` string
- `filter` string
- `companyId` string
- `onlyWithGrantedPermission` union
  - boolean
  - 'true' | 'false'
- `isWithNetworkDocuments` union
  - boolean
  - 'true' | 'false'
- `isNetworkShared` union
  - boolean
  - 'true' | 'false'

## Response `200`

Default Response

- object
  - `meta` object, required
    - `count` number, required
    - `page` number, required
    - `totalCount` number, required
    - `pageSize` number, required
  - `data` object[], required
    - `id` string, required
    - `companyId` string, nullable, required
    - `ownerCompanyId` string, nullable, required
    - `name` string, required
    - `documentTypeId` string, nullable, required
    - `fileId` string, nullable, required
    - `fileUrl` string, nullable, required
    - `originalFileUrl` string, nullable, required
    - `fileType` string, nullable, required
    - `fileContentType` string, nullable, required
    - `isPublic` union, required
      - boolean
      - number
    - `type` string, nullable, required
    - `createdAt` string, date-time, nullable, required
    - `updatedAt` string, date-time, nullable, required
    - `companyName` string, nullable, required
    - `requestCompanyFacilityProcesses` string, nullable, required
    - `internalCompanyCode` string, nullable, required
    - `notes` string, nullable, required
    - `updatedByUserName` string, nullable, required
    - `updatedByCompanyName` string, nullable, required
    - `privacyStatus` object
      - `status` 'public' | 'shared' | 'shared_to' | 'shared_by' | 'private' | 'private_requests', required
      - `requests` integer
      - `approvedRequests` integer
      - `company` object
        - `id` string, required
        - `name` string, nullable, required
    - `permission` object
      - `status` 'requested' | 'none', required
      - `data` object, nullable, required
        - `documentId` string, required
        - `documentOwnerCompanyId` string, nullable, required
        - `sharedWithCompanyId` string, required
        - `sharedWithCompanyName` string, nullable, required
        - `requestedAt` string, date-time, nullable, required
        - `approvedAt` string, date-time, nullable, required

## Other responses

- `401` — Default Response
- `403` — Default Response

## Changes

> 56 revisions in range; 1 not diffed.

- **2026-09-29** `bd9b2edd83c6` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/retraced/apis/api-reference/changes/api/company-documents/get.md)

---

[API](https://skmtc.dev/retraced/apis/api-reference.md) · [All operations](https://skmtc.dev/retraced/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc.dev/retraced/apis/api-reference/revisions/43a47823848e?raw)