> Toden documentation. For the full index fetch /llms.txt. Every page is available as Markdown by appending .md to its URL. Identity verification uses /api/kyc, Risk Intelligence uses /api/v1; they are separate contracts with different error shapes. Never invent an endpoint, field or enum value: read the API reference page for the operation first.

# Get transaction assessment

GET https://sandbox-api.toden.co/api/v1/transactions/{id}

Reference: https://docs.toden.co/api-reference/risk-intelligence/fraud-monitoring/get-gettransactionassessment

## Authentication

- `Authorization` header (bearer token, required) — Bearer authentication of the form `Bearer <token>`, where token is your auth token.

## Servers

- `https://sandbox-api.toden.co/api/v1` (Sandbox, default)
- `https://api.toden.co/api/v1` (Production)

## Request

### Path parameters

- `id` (string, required)

### Headers

- `X-Request-Id` (string, optional)

## Response

### 200

Success

- `assessment` (TransactionAssessmentResponseAssessment, required) — The saved in-house transaction assessment. Pending assessments may not yet contain a decision. Other existing decision, billing, summary and Travel Rule fields are retained.

## Errors

### 400 Bad Request Error

HTTP 400

- `error` (ErrorEnvelopeError, required)

### 401 Unauthorized Error

HTTP 401

- `error` (ErrorEnvelopeError, required)

### 402 Payment Required Error

HTTP 402

- `error` (ErrorEnvelopeError, required)

### 403 Forbidden Error

HTTP 403

- `error` (ErrorEnvelopeError, required)

### 404 Not Found Error

HTTP 404

- `error` (ErrorEnvelopeError, required)

### 409 Conflict Error

HTTP 409

- `error` (ErrorEnvelopeError, required)

### 413 Content Too Large Error

HTTP 400

- `error` (ErrorEnvelopeError, required)

### 422 Unprocessable Entity Error

HTTP 400

- `error` (ErrorEnvelopeError, required)

### 429 Too Many Requests Error

HTTP 429

- `error` (ErrorEnvelopeError, required)

### 500 Internal Server Error

HTTP 500

- `error` (ErrorEnvelopeError, required)

### 502 Bad Gateway Error

HTTP 503

- `error` (ErrorEnvelopeError, required)

### 503 Service Unavailable Error

HTTP 503

- `error` (ErrorEnvelopeError, required)

## Types

### TransactionAssessmentResponseAssessment

The saved in-house transaction assessment. Pending assessments may not yet contain a decision. Other existing decision, billing, summary and Travel Rule fields are retained.

- `activityId` (string, optional)
- `transactionId` (string, optional, nullable)
- `decisionId` (string, optional, nullable)
- `decision` (enum, optional)
  - Allowed values: `allow`, `review`, `block`
- `machineDecision` (enum, optional)
  - Allowed values: `allow`, `review`, `block`
- `status` (string, optional)
- `activityFraudScore` (double, optional, nullable)
- `subjectRisk` (TransactionAssessmentResponseAssessmentSubjectRisk, optional)
- `screening` (TransactionAssessmentResponseAssessmentScreening, optional, nullable) — Directional counterparty checks. Each wallet attempt contains its exact saved normalized wallet evidence. Name checks and missing wallet evidence have an empty walletScreenings array. Check walletEvidenceUnavailable before interpreting an empty array.
- `assessedAt` (string, optional, nullable)
- `processingMs` (double, optional)
- `replayed` (boolean, optional)

### ErrorEnvelopeError

- `type` (enum, required)
  - Allowed values: `AUTHENTICATION_ERROR`, `PERMISSION_ERROR`, `VALIDATION_ERROR`, `NOT_FOUND`, `CONFLICT`, `IDEMPOTENCY_CONFLICT`, `INSUFFICIENT_CREDIT`, `RATE_LIMITED`, `SERVICE_UNAVAILABLE`, `INTERNAL_ERROR`
- `code` (string, required)
- `message` (string, required)
- `request_id` (string, required, nullable)
- `details` (any, optional)

### TransactionAssessmentResponseAssessmentSubjectRisk

- `score` (double, optional, nullable)
- `level` (string, optional, nullable)

### TransactionAssessmentResponseAssessmentScreening

Directional counterparty checks. Each wallet attempt contains its exact saved normalized wallet evidence. Name checks and missing wallet evidence have an empty walletScreenings array. Check walletEvidenceUnavailable before interpreting an empty array.

- `enabled` (boolean, optional)
- `targetRole` (enum, optional)
  - Allowed values: `sender`, `recipient`
- `bankAccountIdentifiersScreened` (false, optional)
- `attempts` (list of TransactionScreeningAttempt, optional)

### TransactionScreeningAttempt

- `type` (string, optional)
- `status` (string, optional)
- `outcome` (string, optional, nullable)
- `assurance` (string, optional)
- `reasonCode` (string, optional, nullable)
- `failureCode` (string, optional, nullable)
- `walletEvidenceUnavailable` (enum, optional) — Non-null means the evidence read is incomplete, not a clean wallet or an empty history.
  - Allowed values: `history_limit_exceeded`
- `walletScreenings` (list of WalletScreeningEvidence, optional)

### WalletScreeningEvidence

- `id` (string, optional)
- `status` (string, optional)
- `wallet` (WalletScreeningEvidenceWallet, optional)
- `risk` (WalletScreeningEvidenceRisk, optional)
- `profile` (WalletScreeningEvidenceProfile, optional) — Analytics attribution only, not verified ownership. Missing values are null; user is never inferred from owner. Dates retain original evidence timestamps.
- `provider` (WalletScreeningEvidenceProvider, optional) — Screening source identity and reference only; no raw response payload.
- `screenedAt` (string, optional, nullable)

### WalletScreeningEvidenceWallet

- `address` (string, optional, nullable)
- `maskedAddress` (string, optional)
- `blockchain` (string, optional)
- `asset` (string, optional, nullable)
- `direction` (string, optional, nullable)

### WalletScreeningEvidenceRisk

- `score` (double, optional, nullable)
- `level` (string, optional, nullable)
- `dominantCategory` (string, optional, nullable)
- `summary` (string, optional, nullable)
- `unknownReason` (string, optional, nullable)

### WalletScreeningEvidenceProfile

Analytics attribution only, not verified ownership. Missing values are null; user is never inferred from owner. Dates retain original evidence timestamps.

- `owner` (string, optional, nullable)
- `ownerType` (string, optional, nullable)
- `ownerSubtype` (string, optional, nullable)
- `user` (string, optional, nullable)
- `userType` (string, optional, nullable)
- `userSubtype` (string, optional, nullable)
- `entityLabel` (string, optional, nullable)
- `entityType` (string, optional, nullable)
- `firstTransactionAt` (string, optional, nullable)
- `latestTransactionAt` (string, optional, nullable)
- `providerDateAdded` (string, optional, nullable)

### WalletScreeningEvidenceProvider

Screening source identity and reference only; no raw response payload.

- `name` (string, optional, nullable)
- `upstreamProvider` (string, optional, nullable)
- `reference` (string, optional, nullable)
- `riskLevel` (string, optional, nullable)

## Examples

**Response**

```json
{
  "assessment": {
    "activityId": "string",
    "transactionId": "string",
    "decisionId": "string",
    "decision": "allow",
    "machineDecision": "allow",
    "status": "string",
    "activityFraudScore": 1.1,
    "subjectRisk": {
      "score": 1.1,
      "level": "string"
    },
    "screening": {
      "enabled": true,
      "targetRole": "sender",
      "bankAccountIdentifiersScreened": false,
      "attempts": [
        {
          "type": "string",
          "status": "string",
          "outcome": "string",
          "assurance": "string",
          "reasonCode": "string",
          "failureCode": "string",
          "walletEvidenceUnavailable": "history_limit_exceeded",
          "walletScreenings": [
            {
              "id": "string",
              "status": "string",
              "wallet": {
                "address": "string",
                "maskedAddress": "string",
                "blockchain": "string",
                "asset": "string",
                "direction": "string"
              },
              "risk": {
                "score": 1.1,
                "level": "string",
                "dominantCategory": "string",
                "summary": "string",
                "unknownReason": "string"
              },
              "profile": {
                "owner": "string",
                "ownerType": "string",
                "ownerSubtype": "string",
                "user": "string",
                "userType": "string",
                "userSubtype": "string",
                "entityLabel": "string",
                "entityType": "string",
                "firstTransactionAt": "string",
                "latestTransactionAt": "string",
                "providerDateAdded": "string"
              },
              "provider": {
                "name": "string",
                "upstreamProvider": "string",
                "reference": "string",
                "riskLevel": "string"
              },
              "screenedAt": "string"
            }
          ]
        }
      ]
    },
    "assessedAt": "string",
    "processingMs": 1.1,
    "replayed": true
  }
}
```

**SDK Code**

```python
import requests

url = "https://sandbox-api.toden.co/api/v1/transactions/id"

headers = {"Authorization": "Bearer <apiKey>"}

response = requests.get(url, headers=headers)

print(response.json())
```

```javascript
const url = 'https://sandbox-api.toden.co/api/v1/transactions/id';
const options = {method: 'GET', headers: {Authorization: 'Bearer <apiKey>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```go
package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-api.toden.co/api/v1/transactions/id"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <apiKey>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

```ruby
require 'uri'
require 'net/http'

url = URI("https://sandbox-api.toden.co/api/v1/transactions/id")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <apiKey>'

response = http.request(request)
puts response.read_body
```

```java
import com.mashape.unirest.http.HttpResponse;
import com.mashape.unirest.http.Unirest;

HttpResponse<String> response = Unirest.get("https://sandbox-api.toden.co/api/v1/transactions/id")
  .header("Authorization", "Bearer <apiKey>")
  .asString();
```

```php
<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('GET', 'https://sandbox-api.toden.co/api/v1/transactions/id', [
  'headers' => [
    'Authorization' => 'Bearer <apiKey>',
  ],
]);

echo $response->getBody();
```

```csharp
using RestSharp;

var client = new RestClient("https://sandbox-api.toden.co/api/v1/transactions/id");
var request = new RestRequest(Method.GET);
request.AddHeader("Authorization", "Bearer <apiKey>");
IRestResponse response = client.Execute(request);
```

```swift
import Foundation

let headers = ["Authorization": "Bearer <apiKey>"]

let request = NSMutableURLRequest(url: NSURL(string: "https://sandbox-api.toden.co/api/v1/transactions/id")! as URL,
                                        cachePolicy: .useProtocolCachePolicy,
                                    timeoutInterval: 10.0)
request.httpMethod = "GET"
request.allHTTPHeaderFields = headers

let session = URLSession.shared
let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in
  if (error != nil) {
    print(error as Any)
  } else {
    let httpResponse = response as? HTTPURLResponse
    print(httpResponse)
  }
})

dataTask.resume()
```