Look up a user’s KYC status (admin)
Internal KYC status endpoint for backend, backoffice, and onboarding orchestration. The /v1/internal/kyc form is exposed on the shared API host; the /api/internal/kyc form remains available for cluster-local service calls. Authenticated with either a backend user bearer token or an org-scoped Cowdi API key; returns the backend-compatible status DTO for a user. A platform (cowdi) API key with PLATFORM-scoped access may pass organization_id to scope the lookup to another tenant.
Cowdi backend-compatible RS256 JWT. sub may be the global user id or a Firebase auth id; Firebase auth-id subjects and missing organization claims are resolved through the backend user/access endpoints. Validated against the configured JWKS (lib/backend-auth.ts).
In: header
Query Parameters
Global user id (JWT sub) to look up.
uuidTarget organization to scope the lookup to. Honored only for a platform (cowdi) API key holding PLATFORM-scoped access; every other caller resolves the organization from its bearer token and must omit this parameter (otherwise 400/403).
1 <= lengthResponse Body
application/json
application/json
application/json
application/json
application/json
application/json
application/json
curl -X GET "https://example.com/v1/internal/kyc/status?user_id=497f6eca-6276-4993-bfeb-53cbbbba6f08"{ "user_id": "a169451c-8525-4352-b8ca-070dd449a1a5", "organization_id": "string", "application_id": "48ac72d0-a829-4896-a067-dcb1c2b0f30c", "status": "DRAFT", "user_type": "INDIVIDUAL", "merchant_type": "SOLE_PROPRIETOR", "verification_result": "PENDING", "verification_reason_code": "string", "verification_reason": "string", "resubmission_count": 0, "reapply_blocked_until": "2026-06-04T10:20:00.000Z", "verification_completed_at": "2026-06-04T10:20:00.000Z", "submitted_at": "2026-06-04T10:20:00.000Z", "updated_at": "2026-06-04T10:20:00.000Z", "subject": { "type": "merchant", "id": "string", "phone": "string", "organization_user_id": "string", "name": "string", "email": "string", "id_number": "string", "date_of_birth": "1990-05-21", "gender": "MALE", "identity_type": "NATIONAL_ID" }}{ "code": "INVALID_PARAMS", "description": "user_id must be a UUID", "identifier": "string", "invalid_params": [ { "path": "user_id", "reason": "must be a UUID", "sub_code": "string" } ]}{ "code": "INVALID_PARAMS", "description": "user_id must be a UUID", "identifier": "string", "invalid_params": [ { "path": "user_id", "reason": "must be a UUID", "sub_code": "string" } ]}{ "code": "INVALID_PARAMS", "description": "user_id must be a UUID", "identifier": "string", "invalid_params": [ { "path": "user_id", "reason": "must be a UUID", "sub_code": "string" } ]}{ "code": "INVALID_PARAMS", "description": "user_id must be a UUID", "identifier": "string", "invalid_params": [ { "path": "user_id", "reason": "must be a UUID", "sub_code": "string" } ]}{ "code": "INVALID_PARAMS", "description": "user_id must be a UUID", "identifier": "string", "invalid_params": [ { "path": "user_id", "reason": "must be a UUID", "sub_code": "string" } ]}{ "code": "INVALID_PARAMS", "description": "user_id must be a UUID", "identifier": "string", "invalid_params": [ { "path": "user_id", "reason": "must be a UUID", "sub_code": "string" } ]}Get installments for an account GET
Retrieves the installment schedule for a lending account (term loan or revolving credit)
Look up a user’s KYC subject details (service-to-service) GET
Internal endpoint for backend services. The /v1/internal/kyc form is available on the shared API host; the /api/internal/kyc form remains available for cluster-local service calls. Authenticated with either a backend user bearer token or an org-scoped Cowdi API key; returns the full identity and document payload for a KYC subject (ID and selfie images inlined as base64), used to submit a Choice Bank onboarding during current-account self-activation. A platform (cowdi) API key with PLATFORM-scoped access may pass organization_id to scope the lookup to another tenant. Returns 404 when the user has no provisioned subject yet.