> ## Documentation Index > Fetch the complete documentation index at: https://docs.didit.me/llms.txt > Use this file to discover all available pages before exploring further. # API per ottenere l'URL di download del report FIU > Con Didit si genera un URL presignato per scaricare l'XML goAML o il PDF di un report finalizzato, pronto per il download. Prompt API per ottenere l'URL di download del report Copia il prompt negli appunti \

\`Get a download URL for a finalized FIU report through the Management API.

Endpoint:
GET https://verification.didit.me/v3/organization/{organization_id}/application/{application_id}/regulatory-reports/{report_uuid}/download-url/

Authentication:
Use the x-api-key header with my Didit API key.

Query param:
\- file=pdf (default) or file=xml

Example call:
curl -X GET "https://verification.didit.me/v3/organization/{organization_id}/application/{application_id}/regulatory-reports/{report_uuid}/download-url/?file=xml" \
-H "x-api-key: YOUR_API_KEY"

Response 200: {"download_url": "https://", "file": "xml"}

Failure modes:
\- 400 - file is neither pdf nor xml.
\- 409 - the report is not finalized yet ({"detail": "Report is not finalized yet.", "status": "DRAFT"}).
\- 401/403 - auth/permission errors (requires read:cases).

Side effects: none - mints a new presigned URL each call; the underlying file is not regenerated.

For the full integration shape, see /integration/integration-prompt.`

\
Incolla in Ottieni un URL di download prefirmato per l'XML goAML di un report finalizzato (per l'invio al portale FIU) o per il PDF (per i registri interni).## Correlati- [Finalizzare il report](https://docs.didit.me/it/management-api/regulatory-reports/finalize.md) - [Elenco dei report](https://docs.didit.me/it/management-api/regulatory-reports/list.md) - [Eliminare il report](https://docs.didit.me/it/management-api/regulatory-reports/delete.md) ## OpenAPI ````yaml it/openapi-25.json GET /v3/organization/{organization_id}/application/{application_id}/regulatory-reports/{report_uuid}/download-url/ openapi: 3.0.0 info: version: 3.0.0 title: Didit Verification API description: API di verifica dell'identità. Autenticati con l'intestazione x-api-key. servers: - url: https://verification.didit.me security: [] tags: [] paths: /v3/organization/{organization_id}/application/{application_id}/regulatory-reports/{report_uuid}/download-url/: get: tags: - Regulatory Reports summary: Recupera URL di download del report description: >- Genera un URL pre-firmato per l'XML goAML o il PDF di un report finalizzato. operationId: get_regulatory_report_download_url parameters: - name: organization_id in: path required: true schema: type: string format: uuid description: UUID dell'organizzazione. - name: application_id in: path required: true schema: type: string format: uuid description: UUID dell'applicazione. - name: report_uuid in: path required: true schema: type: string format: uuid example: 5ec00000-0000-4000-8000-000000000007 description: UUID del report. - name: file in: query schema: type: string enum: - pdf - xml default: pdf description: Quale file scaricare. responses: '200': description: URL di download prefirmato. content: application/json: schema: type: object properties: download_url: type: string format: uri file: type: string enum: - pdf - xml '409': description: Il report non è ancora finalizzato. content: application/json: schema: type: object properties: detail: type: string status: type: string security: - ApiKeyAuth: [] x-codeSamples: - lang: curl label: curl source: >- curl -X GET 'https://verification.didit.me/v3/organization/11111111-2222-3333-4444-555555555555/application/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee/regulatory-reports/5ec00000-0000-4000-8000-000000000007/download-url/?file=xml' \ -H 'x-api-key: YOUR_API_KEY' - lang: python label: Python source: |- from didit import Didit # Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID # and DIDIT_APPLICATION_ID. client = Didit() result = client.regulatory_reports.retrieve_download_url( "5ec00000-0000-4000-8000-000000000007", ) print(result) - lang: javascript label: Node.js source: >- import Didit from "@didit-protocol/sdk-node"; // Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID // and DIDIT_APPLICATION_ID. const didit = new Didit(); const result = await didit.regulatoryReports.retrieveDownloadUrl("5ec00000-0000-4000-8000-000000000007"); console.log(result); - lang: go label: Go source: "ctx := context.Background()\n// Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID\n// and DIDIT_APPLICATION_ID.\nclient := didit.NewClient()\n\nresult, err := client.RegulatoryReports.RetrieveDownloadURL(ctx, \"5ec00000-0000-4000-8000-000000000007\", didit.RegulatoryReportsRetrieveDownloadURLParams{})\nif err != nil {\n\tlog.Fatal(err)\n}\nfmt.Printf(\"%+v\\n\", result)" - lang: java label: Java source: >- import me.didit.Didit; // Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID // and DIDIT_APPLICATION_ID. Didit client = new Didit(); var result = client.regulatoryReports().retrieveDownloadUrl("5ec00000-0000-4000-8000-000000000007"); System.out.println(result); - lang: php label: PHP source: >- regulatoryReports->retrieveDownloadUrl('5ec00000-0000-4000-8000-000000000007'); print_r($result->toArray()); - lang: ruby label: Ruby source: >- require "didit" # Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID # and DIDIT_APPLICATION_ID. didit = Didit::Client.new result = didit.regulatory_reports.retrieve_download_url("5ec00000-0000-4000-8000-000000000007") puts result.to_h - lang: csharp label: .NET source: >- using System; using System.Text.Json; using Didit; // Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID // and DIDIT_APPLICATION_ID. using var client = new DiditClient(); var result = await client.RegulatoryReports.RetrieveDownloadUrlAsync("5ec00000-0000-4000-8000-000000000007"); Console.WriteLine(JsonSerializer.Serialize(result)); components: securitySchemes: ApiKeyAuth: type: apiKey in: header name: x-api-key description: >- La chiave API della tua applicazione, da Developers -> API keys nella Business Console. La chiave primaria ha accesso completo. Una chiave con nome può avere un ambito definito: nessuno, lettura o scrittura per risorsa, limitata ad alcuni workflow o a sessioni approvate, a un elenco di indirizzi IP e a una data di scadenza. 401 indica che la chiave è errata, revocata o scaduta; 403 indica che non è stata inviata alcuna chiave, che la chiave non ha accesso a questa risorsa o azione, oppure che la richiesta proviene da un indirizzo non incluso nel suo elenco IP; 404 su una route di sessione indica che la sessione non rientra nei workflow o negli stati previsti dalla chiave. Una chiave senza accesso ai media riceve gli URL di immagini, video e PDF come null, e una chiave senza permessi di scrittura sulle sessioni riceve link e token di sessione come null. Consulta https://docs.didit.me/console/api-keys. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.