> ## Documentation Index
> Fetch the complete documentation index at: https://docs.didit.me/llms.txt
> Use this file to discover all available pages before exploring further.

# List Networks

> List fraud networks detected within this application's organization, newest activity first by default. By default dismissed networks are excluded; pass status to include them. Sandbox applications never have networks - clustering excludes sandbox data entirely.

export const AgentPromptAccordion = ({prompt, title = "AI Agent Integration Prompt"}) => {
  const [copied, setCopied] = React.useState(false);
  const handleCopy = e => {
    e.stopPropagation();
    if (!prompt) return;
    navigator.clipboard.writeText(prompt.trim()).then(() => {
      setCopied(true);
      setTimeout(() => setCopied(false), 2000);
    });
  };
  const agents = ["Claude Code", "Codex", "Cursor", "Devin", "Windsurf", "GitHub Copilot"];
  return <div className="didit-agent-card">
      {}
      <div className="didit-agent-titlebar">
        <div className="didit-agent-dots" aria-hidden="true">
          <span className="didit-agent-dot didit-agent-dot-red"></span>
          <span className="didit-agent-dot didit-agent-dot-yellow"></span>
          <span className="didit-agent-dot didit-agent-dot-green"></span>
        </div>
        <span className="didit-agent-filename">{title}</span>
        <button type="button" className={`didit-agent-copy ${copied ? "didit-agent-copy-copied" : ""}`} onClick={handleCopy} title="Copy prompt to clipboard" aria-label={copied ? "Copied!" : "Copy prompt to clipboard"}>
          {copied ? <>
              <svg width="13" height="13" viewBox="0 0 16 16" fill="none">
                <path d="M3 8.5l3.5 3.5L13 4" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" />
              </svg>
              <span>Copied</span>
            </> : <>
              <svg width="13" height="13" viewBox="0 0 16 16" fill="none">
                <rect x="5" y="5" width="9" height="9" rx="1.5" stroke="currentColor" strokeWidth="1.5" />
                <path d="M11 5V3.5A1.5 1.5 0 0 0 9.5 2h-6A1.5 1.5 0 0 0 2 3.5v6A1.5 1.5 0 0 0 3.5 11H5" stroke="currentColor" strokeWidth="1.5" />
              </svg>
              <span>Copy</span>
            </>}
        </button>
      </div>

      {}
      <pre className="didit-agent-body"><code>{prompt.trim()}</code></pre>

      {}
      <div className="didit-agent-footer">
        <span className="didit-agent-footer-label">Paste into</span>
        <div className="didit-agent-chips">
          {agents.map(name => <span key={name} className="didit-agent-chip">{name}</span>)}
        </div>
      </div>
    </div>;
};

<AgentPromptAccordion
  title="List Networks API Prompt"
  prompt={`List fraud networks for my Didit application through the Management API.

Endpoint:
GET https://verification.didit.me/v3/organization/{organization_id}/application/{application_id}/networks/

Authentication:
Use the x-api-key header with my Didit API key.

Goal:
- Retrieve the same clustered fraud networks the Console's Networks list shows: applicants, businesses, or transaction parties linked by shared device, IP, face, document number, phone, email, or address signals, within my own organization only.

Useful query params:
- status=active,in_review,resolved,dismissed (comma-separated). Omit to exclude dismissed networks.
- signal_type=ip_address,device,face,document_number,phone,email,address (comma-separated)
- pattern_type=exact_same_device,similar_device,same_ip_address,same_address,similar_selfie_backgrounds,similar_poa_documents,same_document_number,same_phone_number,same_email (comma-separated)
- risk_band=low,medium,high (comma-separated)
- min_size, max_size - member count bounds
- date_from, date_to - ISO 8601 date/datetime bounds on activity
- q - free-text search across network name, member names, and the network id (e.g. N-0001)
- ordering=risk_score|-risk_score|last_activity_at|-last_activity_at|first_activity_at|-first_activity_at|network_number|-network_number (default -risk_score,-last_activity_at)
- limit (1-500, default 100), offset

Example call:
curl -X GET "https://verification.didit.me/v3/organization/{organization_id}/application/{application_id}/networks/?status=active,in_review&ordering=-risk_score" \\
-H "x-api-key: YOUR_API_KEY"

Response shape:
{"count": int, "next": int|null, "previous": int|null, "results": [NetworkListItem, ...], "kpis": {...}}
next/previous are offsets, not URLs - null next means the last page.
Each NetworkListItem has uuid, network_id (e.g. "N-0001"), name, status (active|in_review|resolved|dismissed), risk {score, band, bar}, pattern_types, signal_types, member_counts, member_status, signal_coverage, first_activity_at, last_activity_at.
kpis carries active, in_review, applicants_involved, detected_this_period, false_positive_rate, each as {value, delta}, computed over the filtered result set.

Notes:
- Sandbox applications never return networks - clustering excludes sandbox data entirely.
- Networks are clustered organization-wide, but this endpoint only returns networks with at least one member visible to this application.

Failure modes:
- 401 - missing or malformed x-api-key.
- 403 - API key role lacks list:networks.
- 400 - an invalid filter or ordering value.

Side effects: none, pure read.

For the full integration shape, see /integration/integration-prompt.`}
/>

List fraud networks detected for your organization, newest activity first by default. Every filter available in the Console's Networks list is exposed as a query parameter, including free-text `q` search and the same status, signal, pattern, and risk-band chips.

<Note>
  Sandbox applications never have networks. Clustering runs on production data only.
</Note>

## Related

* [Get network](/management-api/networks/get)
* [Network graph](/management-api/networks/graph)
* [Networks (Console)](/console/networks)


## OpenAPI

````yaml GET /v3/organization/{organization_id}/application/{application_id}/networks/
openapi: 3.0.0
info:
  version: 3.0.0
  title: Didit Verification API
  description: Identity verification API. Authenticate with x-api-key header.
servers:
  - url: https://verification.didit.me
security: []
tags: []
paths:
  /v3/organization/{organization_id}/application/{application_id}/networks/:
    get:
      tags:
        - Networks
      summary: List networks
      description: >-
        List fraud networks detected within this application's organization,
        newest activity first by default. By default dismissed networks are
        excluded; pass status to include them. Sandbox applications never have
        networks - clustering excludes sandbox data entirely.
      operationId: list_networks
      parameters:
        - name: organization_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
          description: Organization UUID.
        - name: application_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
          description: Application UUID.
        - name: status
          in: query
          schema:
            type: string
          description: >-
            Comma-separated statuses to include:
            active,in_review,resolved,dismissed. Omit to exclude dismissed.
        - name: signal_type
          in: query
          schema:
            type: string
          description: >-
            Comma-separated signal types:
            ip_address,device,face,document_number,phone,email,address.
        - name: pattern_type
          in: query
          schema:
            type: string
          description: Comma-separated pattern types, e.g. exact_same_device,same_email.
        - name: risk_band
          in: query
          schema:
            type: string
          description: 'Comma-separated bands: low,medium,high.'
        - name: min_size
          in: query
          schema:
            type: integer
          description: Minimum member count.
        - name: max_size
          in: query
          schema:
            type: integer
          description: Maximum member count.
        - name: date_from
          in: query
          schema:
            type: string
            format: date
          description: Lower bound on last_activity_at (ISO 8601 date or datetime).
        - name: date_to
          in: query
          schema:
            type: string
            format: date
          description: Upper bound on first_activity_at (ISO 8601 date or datetime).
        - name: q
          in: query
          schema:
            type: string
          description: >-
            Free-text search across network name, member names, the network_id
            (N-0001), and exact pattern_type tokens.
        - name: ordering
          in: query
          schema:
            type: string
          description: >-
            One of risk_score, -risk_score, last_activity_at, -last_activity_at,
            first_activity_at, -first_activity_at, network_number,
            -network_number. Defaults to -risk_score,-last_activity_at.
        - name: limit
          in: query
          schema:
            type: integer
            default: 100
            minimum: 1
            maximum: 500
          description: Page size, 1-500. Defaults to 100.
        - name: offset
          in: query
          schema:
            type: integer
            default: 0
            minimum: 0
          description: Zero-based offset of the first record.
      responses:
        '200':
          description: Paginated network list with console KPIs.
          content:
            application/json:
              schema:
                type: object
                properties:
                  count:
                    type: integer
                  next:
                    type: integer
                    nullable: true
                    description: Offset of the next page, or null on the last page.
                  previous:
                    type: integer
                    nullable: true
                  results:
                    type: array
                    items:
                      $ref: '#/components/schemas/NetworkListItem'
                  kpis:
                    type: object
                    description: >-
                      Each key is {value, delta} over the current filtered
                      queryset.
                    properties:
                      active:
                        type: object
                      in_review:
                        type: object
                      applicants_involved:
                        type: object
                      detected_this_period:
                        type: object
                      false_positive_rate:
                        type: object
      x-codeSamples:
        - lang: curl
          label: curl
          source: >-
            curl -X GET
            'https://verification.didit.me/v3/organization/11111111-2222-3333-4444-555555555555/application/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee/networks/?status=active,in_review&ordering=-risk_score'
            \
              -H 'x-api-key: YOUR_API_KEY'
components:
  schemas:
    NetworkListItem:
      type: object
      properties:
        uuid:
          type: string
          format: uuid
        network_id:
          type: string
          description: Human-readable per-organization sequential id, e.g. N-0001.
        name:
          type: string
          nullable: true
        status:
          type: string
          enum:
            - active
            - in_review
            - resolved
            - dismissed
          description: >-
            Network lifecycle status. Distinct from the per-applicant
            outcome_status inside a network
            (approved/in_review/declined/not_completed).
        risk:
          $ref: '#/components/schemas/NetworkRiskDisplay'
        pattern_types:
          type: array
          items:
            type: string
            enum:
              - exact_same_device
              - similar_device
              - same_ip_address
              - same_address
              - similar_selfie_backgrounds
              - similar_poa_documents
              - same_document_number
              - same_phone_number
              - same_email
          description: The clustering patterns detected in this network.
        signal_types:
          type: array
          items:
            type: string
            enum:
              - ip_address
              - device
              - face
              - document_number
              - phone
              - email
              - address
          description: The distinct signal types present in this network.
        member_counts:
          type: object
          description: Counts of members by category (e.g. total, per outcome_status).
        member_status:
          type: object
          description: Breakdown of members by outcome_status.
        signal_coverage:
          type: object
          description: Per signal_type coverage of this network's members.
        first_activity_at:
          type: string
          format: date-time
          nullable: true
        last_activity_at:
          type: string
          format: date-time
          nullable: true
    NetworkRiskDisplay:
      type: object
      properties:
        score:
          type: integer
          description: Risk score, 0-100.
        band:
          type: string
          enum:
            - low
            - medium
            - high
          description: Band the score renders as. high >= 70, medium >= 40, otherwise low.
        bar:
          type: number
          format: float
          description: Normalized 0-1 value for rendering a risk bar.

````