Skip to main content
GET
curl

Authorizations

x-api-key
string
header
required

Your application's API key, from Developers -> API keys in the Business Console. The primary key has full access. A named key can be scoped: none, read or write per resource, limited to some workflows or to approved sessions, to a list of IP addresses, and to an expiry date. 401 means the key is missing, wrong, revoked or expired; 403 means the key has no access to this resource or action, or the request came from an address outside its IP list; 404 on a session route means the session is outside the key's workflows or statuses. A key without media access receives image, video and PDF URLs as null, and a key without sessions write receives session links and tokens as null. See https://docs.didit.me/console/api-keys.

Path Parameters

vasp_id
string<uuid>
required

The id of a row of GET /v3/travel-rule/vasps/.

Response

The entry.

A VASP of the directory or a member of the Didit network, with the routes your application has to it. A customer is a member of the Didit network only while its application is live, its Travel Rule is on, its profile is discoverable, has a legal name and a confirmed compliance email, and Didit has not marked the application as a test, demo or internal one. Each row also carries the shared due-diligence assessment (dd_score, risk_level, responsiveness, essential_checks) and your application's own decision, entity screening and questionnaires, which no other customer sees.

id
string<uuid>

The entry's id, for GET /v3/travel-rule/vasps/{vasp_id}/.

kind
enum<string>

directory for an entry of the shared directory; didit for a member of the Didit network.

Available options:
directory,
didit
name
string
lei
string
jurisdiction
string

ISO 3166 country code, as the source gives it.

domains
string[]

The VASP's web domains. Always empty for Didit network members.

reachable
boolean

Whether your application has an available route to this VASP, or to one of its entities for a brand. Always true for a Didit network member.

aliases
object[]

Other names the VASP is found by.

networks
object[]
routes
object[]
umbrella
object | null

The brand this entry is a regulated entity of. Null when it is not part of one.

entities
object[]

For a brand, the regulated entities that receive its transfers. A transfer naming the brand goes to the reachable entity in the jurisdiction it states (beneficiary_data.counterparty_vasp_jurisdiction), else to the entity blockchain analytics attribution linked to the destination wallet, else to the only reachable entity when no jurisdiction is stated. Two entities that fit equally are never guessed between.

contacts
object[]

The platform's contacts for this VASP and your application's own.

dd_status
enum<string>

Didit's verification status of the entry, scored by the verification component of dd_score. Always COMPLETED for a Didit network member.

Available options:
NOT_STARTED,
IN_PROGRESS,
COMPLETED,
REJECTED
dd_score
integer | null

The shared due-diligence score of a directory entry, 0 to 100, where higher is safer (see dd_score_semantic): the sum of the points in dd_score_breakdown. Null for a Didit network member, which is not scored. An entry not assessed yet (dd_assessed_at null) shows 0 with an empty risk_level, so read risk_level rather than the raw score.

Required range: 0 <= x <= 100
dd_score_breakdown
object

One object per component of dd_score. Components, their weight (max) and their reason codes: jurisdiction, 25 (jurisdiction_not_high_risk, jurisdiction_high_risk, jurisdiction_unknown); verification, 15 (dd_status_completed, dd_status_in_progress, dd_status_not_started, dd_status_rejected); protocol, 15 (native_rail, email_only, no_rail); lei, 10 (lei_valid, lei_missing); history, 10 (history, no_history); essentials, 15 (essential_checks, no_essential_checks); responsiveness, 10 (responsive, unresponsive, responsiveness_unknown). Empty for a Didit network member.

dd_assessed_at
string<date-time> | null

When dd_score, risk_level and responsiveness were last computed: after an exchange with the entry completes, finishes, expires, mismatches or is declined, when Didit refreshes or curates the entry, and in the weekly directory refresh. Null for a Didit network member.

dd_score_semantic
enum<string>

Which way dd_score points: always higher_is_safer.

Available options:
higher_is_safer
risk_level
enum<string>

The band dd_score falls in: LOW (70 or more), MEDIUM (40 to 69) or HIGH (below 40). Empty for a Didit network member and for an entry not assessed yet. Filter on it with risk. Your own flagged screening never changes this shared value: it makes counterparty_risk_level HIGH in your rules instead.

Available options:
LOW,
MEDIUM,
HIGH,
responsiveness
object

Whether the VASP answers Travel Rule requests: the share of the requests Didit customers started towards it in the last 90 days that it answered. Only requests sent over a network or protocol rail, or by email to a shared address (the entry's compliance address or a platform contact), count; a request sent to an address a customer typed, or to a customer's private contact, never does. An expired request is unanswered; a completed exchange, a decline or a data mismatch is an answer; a cancelled request or an unreachable rail is neither. Always UNKNOWN with zero counts for a Didit network member.

essential_checks
object

The essential-checks report of a directory entry, built only from the platform's verified sources: registration (an official register lists the VASP: the EU's interim MiCA register, the public TRISA directory or the global LEI register), licence (a MiCA authorisation is on record and current), domain (the entry's domain matches its TRP endpoint or the website its register gives) and lei (its LEI record is active, issued and consistent with the entry's names and country). The essentials component of dd_score is the share of decided checks that pass. Empty until the weekly directory refresh first checks the entry, and always empty for a Didit network member.

reachable_rails
enum<string>[]

Rails recorded on the entry. Read routes for what your application can use today.

Available options:
INTERNAL,
TRP,
GTR,
TRUST,
VERIFYVASP,
SYGNA,
EMAIL
is_didit_customer
boolean

true for a member of the Didit network (dd_status is always COMPLETED, dd_score null and risk_level empty for these) and for a directory entry linked to a Didit customer.

decision
object | null

Your application's decision on this VASP, or for an entity with no decision of its own its brand's (inherited_from names the brand). Null when there is none. Private to your application.

entity_screening
object | null

Your application's latest sanctions and adverse-media screening of this VASP. Null when you never screened it. Private to your application.

questionnaires
object[]

Your application's due-diligence questionnaires with this VASP, newest first. Private to your application.