Retrieve a business check

GET

/api/kyc/checks/business/:id

GET

/api/kyc/checks/business/:id

curl https://sandbox-api.toden.co/api/kyc/checks/business/id \
     -H "Authorization: Bearer <apiKey>"

{
  "check": {
    "id": "cmt8s0a4p0002qw9k2m7f3abc",
    "status": "verified",
    "country": "NG",
    "initiatedVia": "api",
    "createdAt": "2026-09-12T10:00:00.000Z",
    "product": "business",
    "reasonCode": null,
    "verificationMethod": "sandbox",
    "chargedAmount": null,
    "completedAt": "2026-09-12T10:00:02.000Z",
    "reason": null,
    "chargedBreakdown": {},
    "registrationNumber": "RC0000001",
    "businessName": "Example Trading Limited",
    "registrationName": "Example Trading Limited",
    "subdivision": null,
    "businessRecord": {
      "affiliates": [],
      "keyPersonnel": [
        {
          "name": "Ada Example",
          "designation": "Director"
        }
      ],
      "name": "Example Trading Limited",
      "registrationNumber": "RC0000001",
      "typeOfEntity": "Private company limited by shares",
      "companyStatus": "Active"
    }
  }
}

Returns one business check in full, including what the registry holds on the business. Poll this until status leaves pending. businessRecord is null until the business is found.

Error codes

`error`	Status	Meaning
`not_found`	404	No business check with that id, or it was deleted.
`secret_key_required`	403	A publishable key was used. This endpoint accepts secret keys only.
`environment_mismatch`	403	The key belongs to an environment this deployment does not serve.
`ip_not_allowed`	403	The key has an IP allowlist and the calling address is not on it.
`organization_suspended`	403	The organisation is suspended. The response carries `reason` and `suspendedAt`.
`business_not_approved`	403	A live key was used before the business was approved for production.

A missing or unknown key answers 401, where error is a short sentence rather than a code.

Requires a secret (sk_) key. A publishable key receives 403 secret_key_required.

Authentication

AuthorizationBearer

Send the API key as a Bearer token. Each operation states whether a publishable key is enough or a secret key is required.

Path parameters

idstringRequired

The check id, as returned by the submit as verificationId.

Response

The business check.

checkobject

Errors

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error