# List records URL: https://docs.hanzo.ai/docs/openapi/compliance/get-compliance-records > The unified compliance-record view for the org: its verifications and accreditation records together, each provider-reported or tracked, never platform-asserted. `GET /v1/compliance/records` > [Compliance →](https://docs.hanzo.ai/docs/openapi/compliance) · [All API references →](https://docs.hanzo.ai/docs/openapi) · [Get started →](https://docs.hanzo.ai/docs/guides) | | | | ------------- | -------------------------------------------- | | **Address** | `https://api.hanzo.ai/v1/compliance/records` | | **Method** | `GET` | | **Operation** | `get_compliance_records` | | **Auth** | `Authorization: Bearer $HANZO_API_KEY` | The unified compliance-record view for the org: its verifications and accreditation records together, each provider-reported or tracked, never platform-asserted. PII stays in the subject store; records carry only opaque ids and statuses. ## Request 1 field. | Field | In | Type | Required | Description | | ------- | ----- | ------- | -------- | -------------------------------------------------------------------- | | `limit` | query | integer | — | Limit caps the rows returned; non-positive means the server default. | ## Response | Status | Body | Meaning | | --------- | --------------------- | ------- | | `200` | compliance.recordList | ok | | `default` | problem-details | refused | `200` body — 24 fields. | Field | In | Type | Always | Description | | ------------------------------- | ---- | ----------------------- | ------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `accreditation` | body | compliance.accView\[] | — | Accreditation is the org's tracked accreditation-state records. | | `accreditation[].basis` | body | string | — | Basis is the qualification category: income, net\_worth, professional\_license, or entity. | | `accreditation[].createdAt` | body | integer (int64) | — | CreatedAt is the unix second the record was created. | | `accreditation[].evidenceDocId` | body | string | — | EvidenceDocID references an evidence document in the org's sealed data room. | | `accreditation[].expiresAt` | body | integer (int64) | — | ExpiresAt is the unix second a confirmation ages out; 0 means none. | | `accreditation[].id` | body | string | — | ID is the accreditation record's opaque id. | | `accreditation[].method` | body | string | — | Method is how the state was established: self\_attested, third\_party\_letter, or provider\_verified. | | `accreditation[].note` | body | string | — | Note is a non-PII operator note. | | `accreditation[].reviewerSub` | body | string | — | ReviewerSub is the org user who recorded a decision on this record. | | `accreditation[].status` | body | string | — | Status is the tracked state: asserted, provider\_verified, reviewer\_confirmed, rejected, or expired. | | `accreditation[].subjectId` | body | string | — | SubjectID is the opaque id of the subject the record is about. | | `accreditation[].updatedAt` | body | integer (int64) | — | UpdatedAt is the unix second the record last changed. | | `disclaimer` | body | string | — | Disclaimer states that statuses are provider-reported or tracked, never a platform assertion of legal or regulatory compliance. | | `verifications` | body | compliance.checkView\[] | — | Verifications is the org's KYC/KYB checks, provider-reported statuses only. | | `verifications[].createdAt` | body | integer (int64) | — | CreatedAt is the unix second the verification was started. | | `verifications[].decidedAt` | body | integer (int64) | — | DecidedAt is the unix second a terminal status was recorded. | | `verifications[].decidedBy` | body | string | — | DecidedBy records who settled a terminal status: the provider name, or a reviewer's user id for a recorded manual decision. | | `verifications[].id` | body | string | — | ID is the verification's opaque id. | | `verifications[].kind` | body | string | — | Kind is the party type: "individual" (KYC) or "business" (KYB). | | `verifications[].provider` | body | string | — | Provider is the verification provider this check runs through. | | `verifications[].status` | body | string | — | Status is the check's state: pending, provider\_verified, provider\_rejected, manual\_review, or expired (provider-reported), or reviewer\_confirmed — the one value a privileged human reviewer records, never a provider. | | `verifications[].subjectId` | body | string | — | SubjectID is the opaque id of the subject under verification. | | `verifications[].updatedAt` | body | integer (int64) | — | UpdatedAt is the unix second the verification last changed. | | `verifications[].verifyUrl` | body | string | — | VerifyURL is the provider's hosted verification flow for the subject, when one exists. | Failure carries the platform error shape — see [Errors](https://docs.hanzo.ai/docs/errors). ## Examples **CLI** ```bash hanzo compliance records ``` **SDK** **.ts** ```ts import { Configuration, ComplianceApi } from 'hanzoai'; const api = new ComplianceApi(new Configuration({ accessToken: process.env.HANZO_API_KEY })); const { data } = await api.getComplianceRecords(); ``` **.py** ```python from hanzoai.cloud import ApiClient, Configuration from hanzoai.cloud.api import ComplianceApi client = ApiClient(Configuration(access_token=os.environ["HANZO_API_KEY"])) result = ComplianceApi(client).get_compliance_records() ``` **.go** ```go cfg := hanzoai.NewConfiguration() cfg.AddDefaultHeader("Authorization", "Bearer "+os.Getenv("HANZO_API_KEY")) client := hanzoai.NewAPIClient(cfg) resp, _, err := client.ComplianceAPI.GetComplianceRecords(context.Background()).Execute() if err != nil { return err } ``` **.rs** ```rust use hanzo_client::apis::{configuration::Configuration, compliance_api}; let mut cfg = Configuration::new(); cfg.bearer_access_token = std::env::var("HANZO_API_KEY").ok(); let result = compliance_api::get_compliance_records(&cfg, Default::default()).await?; ``` **.java** ```java import ai.hanzo.cloud.ApiClient; import ai.hanzo.cloud.api.ComplianceApi; ApiClient client = new ApiClient(); client.setBearerToken(System.getenv("HANZO_API_KEY")); var result = new ComplianceApi(client).getComplianceRecords(); ``` **HTTP** ```bash curl https://api.hanzo.ai/v1/compliance/records \ -H "Authorization: Bearer $HANZO_API_KEY" ``` **MCP** MCP reaches **compliance** through the `compliance` tool, which names its 16 operations with its own verbs — this one among them, under a name only MCP declares. `describe` explains any of them: ```bash curl -X POST https://api.hanzo.ai/v1/mcp \ -H "Content-Type: application/json" \ -d '{ "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "describe", "arguments": { "op": "get_compliance_accreditation" } } }' ``` --- [Compliance API](https://docs.hanzo.ai/docs/openapi/compliance) · [All Hanzo APIs](https://docs.hanzo.ai/docs/openapi) · [Interactive reference](https://docs.hanzo.ai/docs/openapi/reference)