Signatures

List the signatures of a request

GET/signature-requests/{signature_request_id}/signatures
signatures:readlist_signature_request_signaturesRead-only

Lists the live signatures of one request, newest first; the same answer as GET /signatures?filter[signature_request_id]=. 404 for an unknown request or one whose document the caller cannot read. Investors and advisors see only their own signatures. Ip address, user agent and hashes are not exposed; the signed PDF is signed_document_id, downloadable with GET /documents/{documentId}/download. Changes nothing.

Path parameters

  • signature_request_idstring (uuid)Required#

    The signature request's id.

Query parameters

  • limitinteger#

    Page size (1–100). Defaults to 25; values are clamped to the range.

    Default: 25
  • cursorstring#

    Opaque pagination cursor taken from a prior response's meta.next_cursor.

  • fieldsstring#

    Comma-separated top-level fields to return. id is always returned.

  • sortstring#

    Comma-separated fields to sort by: created_at. Prefix a field with - for descending. Defaults to -created_at. The id is always the final tiebreak.

  • filter[signature_request_id]string (uuid)#

    Signatures of this request. Takes [in] and [not_in] with a comma-separated list.

  • filter[document_id]string (uuid)#

    Signatures on requests to have this document signed. Takes [in] and [not_in] with a comma-separated list.

  • filter[signatory_id]string (uuid)#

    Signatures to be given by this user or group id. Takes [in] and [not_in] with a comma-separated list.

  • filter[signatory_type]string#

    Signatures to be given by a signatory of this kind: user, group, multi_user or machine. Takes [in] and [not_in] with a comma-separated list.

    One of: user, group, multi_user, machine
  • filter[status]string#

    Signatures in this status: pending, signed, verified, rejected, not_required, not_initialised, initialising, declined, withdrawn or error. not_initialised also matches a signature with no status. Takes [in] and [not_in] with a comma-separated list.

    One of: pending, signed, verified, rejected, not_required, not_initialised, initialising, declined, withdrawn, error
  • filter[within_folder_id]string (uuid)#

    Signatures on requests made on a folder in this folder's subtree, or on a document in it. Takes [in] and [not_in] with a comma-separated list of at most 50 folder ids.

  • filter[created_at]string (date-time)#

    Created at or after / before a UTC date-time such as 2026-03-01T00:00:00Z. Use [gt], [gte], [lt] or [lte].

Responses

200

One page of records.

Signature[]
{
  "data": [
    {
      "id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
      "signature_request_id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
      "document_id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
      "status": "pending",
      "signatory": {
        "id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
        "type": "user"
      },
      "signatory_name": "string",
      "signed_document_id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
      "signed_using_method": "string",
      "signing_methods": [
        "string"
      ],
      "captured_at": "2026-06-12T10:00:00+00:00",
      "reason": "string",
      "error": "string",
      "created_at": "2026-06-12T10:00:00+00:00",
      "updated_at": "2026-06-12T10:00:00+00:00"
    }
  ],
  "meta": {
    "limit": 1,
    "next_cursor": "string",
    "prev_cursor": "string"
  }
}
401

Authentication failed. error.code is one of invalid_token, expired, revoked.

Error
403

Authorization failed. error.code is one of org_disabled, ip_blocked, missing_scope, scope_disabled, user_disabled.

Error
404

Resource not found (error.code = not_found).

Error
422

The request can't be processed (HTTP 422): validation_failed with one ErrorDetail per problem, or a code documented on the operation.

Error
429

Rate limit exceeded (error.code = rate_limited).

Error

Examples

curl https://your-org-domain/kong/core/api/v2/signature-requests/{signature_request_id}/signatures\
  -H "Authorization: Bearer $HELM_API_KEY"\
  -H "Content-Type: application/json"