List the documents of a contract
/contracts/{contract_id}/documentsLists the documents of one contract in the order they were added. Each shows the document, its name and the status of the signature that fulfilled it: not_initialised when that signature has no status, null when there is none. 404 for an unknown contract or one the caller cannot see. As in the platform, every document of a contract the caller can see is listed; read a document with GET /documents/{id}, which applies its own access. Deleted documents are left out. Changes nothing.
Path parameters
The contract's id.
Query parameters
- Default:
Page size (1–100). Defaults to 25; values are clamped to the range.
25 Opaque pagination cursor taken from a prior response's
meta.next_cursor.Comma-separated top-level fields to return.
idis always returned.Comma-separated fields to sort by: created_at. Prefix a field with
-for descending. Defaults tocreated_at. The id is always the final tiebreak.
Responses
{
"data": [
{
"id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
"document_id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
"document_name": "string",
"signature_id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
"signature_status": "pending",
"created_at": "2026-06-12T10:00:00+00:00",
"updated_at": "2026-06-12T10:00:00+00:00"
}
],
"meta": {
"limit": 1,
"next_cursor": "string",
"prev_cursor": "string"
}
}Authorization failed. error.code is one of org_disabled,
ip_blocked, missing_scope, scope_disabled, user_disabled.
The request can't be processed (HTTP 422): validation_failed with one ErrorDetail per
problem, or a code documented on the operation.
Examples
curl https://your-org-domain/kong/core/api/v2/contracts/{contract_id}/documents\
-H "Authorization: Bearer $HELM_API_KEY"\
-H "Content-Type: application/json"