> ## Documentation Index > Fetch the complete documentation index at: https://docs.didit.me/llms.txt > Use this file to discover all available pages before exploring further. # Create KYB Party Draft API > Add a person or company to the key people list of a KYB session without declaring it yet. ## OpenAPI ````yaml POST /v3/session/{sessionId}/kyb/parties/drafts/ openapi: 3.0.0 info: version: 3.0.0 title: Didit Verification API description: Identity verification API. Authenticate with x-api-key header. servers: - url: https://verification.didit.me security: [] tags: [] paths: /v3/session/{sessionId}/kyb/parties/drafts/: post: tags: - Sessions summary: Create a KYB party draft description: >- Add a party (a person or a company) to the list you are preparing for this KYB session. The same fields and rules as the hosted Key People screen apply: a person needs `full_name` or `first_name` and `last_name`, at least one role and a nationality; a company needs `company_name` and the country of incorporation in `nationality`. Nothing is declared or billed until `POST /v3/session/{sessionId}/kyb/parties/submit/`. Requires `write:businesses`. operationId: post_v3_session_kyb_party_drafts parameters: - name: sessionId in: path required: true description: >- UUID of the Business Verification (KYB) session. It must belong to the application of the API key. schema: type: string format: uuid example: 33333333-4444-5555-6666-777777777777 - name: node_id in: query required: false description: >- Workflow node of the KYB step. Only needed when the workflow has more than one KYB node; by default Didit uses the session's own node. schema: type: string requestBody: required: true content: application/json: schema: type: object required: - entity_type - nationality properties: entity_type: type: string enum: - person - company description: Whether the party is an individual or a company. full_name: type: string maxLength: 255 description: >- Full name of a person. Send it, or `first_name` and `last_name`. first_name: type: string maxLength: 128 last_name: type: string maxLength: 128 role: type: string enum: - director - non_executive_director - secretary - chairman - ubo - shareholder - representative - founder - legal_advisor - authorized_signatory - trustee - beneficiary - settlor - protector - company_officer - investor - other description: >- Role the party holds. Interchangeable with `roles`; when both are sent they are merged. roles: type: array items: type: string enum: - director - non_executive_director - secretary - chairman - ubo - shareholder - representative - founder - legal_advisor - authorized_signatory - trustee - beneficiary - settlor - protector - company_officer - investor - other description: >- Every role the party holds. A person needs at least one role (here or in `role`). position: type: string maxLength: 128 description: Job title of a person. date_of_birth: type: string format: date nullable: true company_name: type: string maxLength: 255 description: >- Name of a company party. Required when `entity_type` is `company`. registration_number: type: string maxLength: 100 description: Registration number of a company party. email: type: string format: email description: >- Where the verification link is sent. Required when the party has to complete verification, which depends on the role settings and ownership thresholds of the workflow. ownership_percent: type: number nullable: true description: Share of the company the party owns. nationality: type: string maxLength: 100 description: >- Nationality of a person, or country of incorporation of a company. Required for every party. phone_number: type: string maxLength: 32 custom_fields: type: object additionalProperties: true description: Workflow-defined extra fields. skip_verification: type: boolean default: false description: >- Ask to skip this party's verification. Honoured only when the party's role allows skipping in the workflow's Key People settings. example: entity_type: person first_name: Ana last_name: Lopez roles: - ubo - director ownership_percent: 60 nationality: MEX email: ana.lopez@example.com date_of_birth: '1984-06-12' responses: '201': description: Draft created. content: application/json: schema: type: object required: - draft_id - created_at - updated_at - party properties: draft_id: type: string format: uuid created_at: type: string format: date-time updated_at: type: string format: date-time party: type: object required: - entity_type - nationality properties: entity_type: type: string enum: - person - company description: Whether the party is an individual or a company. full_name: type: string maxLength: 255 description: >- Full name of a person. Send it, or `first_name` and `last_name`. first_name: type: string maxLength: 128 last_name: type: string maxLength: 128 role: type: string enum: - director - non_executive_director - secretary - chairman - ubo - shareholder - representative - founder - legal_advisor - authorized_signatory - trustee - beneficiary - settlor - protector - company_officer - investor - other description: >- Role the party holds. Interchangeable with `roles`; when both are sent they are merged. roles: type: array items: type: string enum: - director - non_executive_director - secretary - chairman - ubo - shareholder - representative - founder - legal_advisor - authorized_signatory - trustee - beneficiary - settlor - protector - company_officer - investor - other description: >- Every role the party holds. A person needs at least one role (here or in `role`). position: type: string maxLength: 128 description: Job title of a person. date_of_birth: type: string format: date nullable: true company_name: type: string maxLength: 255 description: >- Name of a company party. Required when `entity_type` is `company`. registration_number: type: string maxLength: 100 description: Registration number of a company party. email: type: string format: email description: >- Where the verification link is sent. Required when the party has to complete verification, which depends on the role settings and ownership thresholds of the workflow. ownership_percent: type: number nullable: true description: Share of the company the party owns. nationality: type: string maxLength: 100 description: >- Nationality of a person, or country of incorporation of a company. Required for every party. phone_number: type: string maxLength: 32 custom_fields: type: object additionalProperties: true description: Workflow-defined extra fields. skip_verification: type: boolean default: false description: >- Ask to skip this party's verification. Honoured only when the party's role allows skipping in the workflow's Key People settings. example: draft_id: 5b0d7a52-9d3e-4f0c-8c6a-0e5f3a1b2c4d created_at: '2026-10-31T10:00:00Z' updated_at: '2026-10-31T10:00:00Z' party: entity_type: person first_name: Ana last_name: Lopez roles: - ubo - director ownership_percent: 60 nationality: MEX email: ana.lopez@example.com date_of_birth: '1984-06-12' '400': description: A party field is invalid or a required one is missing. content: application/json: schema: type: object properties: detail: type: string description: Human-readable error message. example: non_field_errors: - Person parties require at least one role. '401': description: >- The scoped API key has expired. This is the only case that returns `401`: a missing, invalid or revoked key returns `403`. content: application/json: schema: type: object properties: detail: type: string description: Human-readable error message. examples: Expired key: summary: The key's expiry date has passed value: detail: This API key has expired. '403': description: >- Authentication or authorization failure. Missing, invalid and revoked keys return `403` (not `401`); so do a key of another application, a scoped key without the permission this endpoint needs, and a request from outside the key's IP allowlist. Distinguish them by `detail`. content: application/json: schema: type: object properties: detail: type: string description: Human-readable error message. examples: Missing or invalid credentials: summary: No x-api-key header, or the key failed validation value: detail: >- Authentication credentials were not provided or are invalid. Other application: summary: >- A valid key that belongs to a different application than the session value: detail: You do not have permission to perform this action. Scoped key without decisions write: summary: 'Scoped key lacks decisions: write' value: detail: This API key has no write access to decisions. IP not allowed: summary: Request from outside the key's IP allowlist value: detail: This API key can't be used from this IP address. '404': description: >- The session does not exist, was deleted, belongs to another application or is outside a scoped key's limits; no detail distinguishes them. content: application/json: schema: type: object properties: detail: type: string description: Human-readable error message. example: detail: Session not found. '409': description: The session is finished (`kyb_session_not_writable`). content: application/json: schema: type: object properties: detail: type: string description: Human-readable error message. code: type: string example: detail: This verification session is no longer accepting changes. code: kyb_session_not_writable '429': description: >- Rate limit exceeded: 300 write (POST, PATCH, DELETE) requests per minute per API key. Wait `Retry-After` seconds before retrying; the `X-RateLimit-*` headers show the budget. content: application/json: schema: type: object properties: detail: type: string description: Human-readable error message. examples: Rate limited: summary: Budget for the current minute exhausted value: detail: >- Write request rate limit exceeded. You can make up to 300 requests per minute. headers: Retry-After: description: Seconds to wait before retrying. schema: type: integer minimum: 1 example: 30 security: - ApiKeyAuth: [] x-codeSamples: - lang: python label: Python source: |- from didit import Didit # Reads DIDIT_API_KEY. client = Didit() result = client.sessions.create_kyb_party_draft( "33333333-4444-5555-6666-777777777777", entity_type="person", first_name="Ana", last_name="Lopez", roles=["ubo", "director"], date_of_birth="1984-06-12", email="ana.lopez@example.com", ownership_percent=60.0, nationality="MEX", ) print(result) - lang: javascript label: Node.js source: >- import Didit from "@didit-protocol/sdk-node"; // Reads DIDIT_API_KEY. const didit = new Didit(); const result = await didit.sessions.createKybPartyDraft("33333333-4444-5555-6666-777777777777", { entity_type: "person", first_name: "Ana", last_name: "Lopez", roles: ["ubo", "director"], date_of_birth: "1984-06-12", email: "ana.lopez@example.com", ownership_percent: 60.0, nationality: "MEX", }); console.log(result); - lang: go label: Go source: "ctx := context.Background()\n// Reads DIDIT_API_KEY.\nclient := didit.NewClient()\n\nresult, err := client.Sessions.CreateKYBPartyDraft(ctx, \"33333333-4444-5555-6666-777777777777\", didit.SessionsCreateKYBPartyDraftParams{\n\tEntityType: \"person\",\n\tFirstName: didit.String(\"Ana\"),\n\tLastName: didit.String(\"Lopez\"),\n\tRoles: didit.Some([]didit.SessionsCreateKYBPartyDraftParamsRoles{\"ubo\", \"director\"}),\n\tDateOfBirth: didit.String(\"1984-06-12\"),\n\tEmail: didit.String(\"ana.lopez@example.com\"),\n\tOwnershipPercent: didit.Float(60.0),\n\tNationality: \"MEX\",\n})\nif err != nil {\n\tlog.Fatal(err)\n}\nfmt.Printf(\"%+v\\n\", result)" - lang: java label: Java source: >- import java.time.LocalDate; import java.util.List; import me.didit.Didit; import me.didit.types.SessionsCreateKybPartyDraftParams; // Reads DIDIT_API_KEY. Didit client = new Didit(); var result = client.sessions().createKybPartyDraft("33333333-4444-5555-6666-777777777777", SessionsCreateKybPartyDraftParams.builder() .entityType(SessionsCreateKybPartyDraftParams.EntityType.of("person")) .firstName("Ana") .lastName("Lopez") .roles(List.of(SessionsCreateKybPartyDraftParams.Roles.of("ubo"), SessionsCreateKybPartyDraftParams.Roles.of("director"))) .dateOfBirth(LocalDate.parse("1984-06-12")) .email("ana.lopez@example.com") .ownershipPercent(60.0) .nationality("MEX") .build()); System.out.println(result); - lang: php label: PHP source: >- sessions->createKybPartyDraft('33333333-4444-5555-6666-777777777777', [ 'entity_type' => 'person', 'first_name' => 'Ana', 'last_name' => 'Lopez', 'roles' => ['ubo', 'director'], 'date_of_birth' => '1984-06-12', 'email' => 'ana.lopez@example.com', 'ownership_percent' => 60.0, 'nationality' => 'MEX', ]); print_r($result->toArray()); - lang: ruby label: Ruby source: |- require "didit" # Reads DIDIT_API_KEY. didit = Didit::Client.new result = didit.sessions.create_kyb_party_draft( "33333333-4444-5555-6666-777777777777", entity_type: "person", first_name: "Ana", last_name: "Lopez", roles: ["ubo", "director"], date_of_birth: "1984-06-12", email: "ana.lopez@example.com", ownership_percent: 60.0, nationality: "MEX" ) puts result.to_h - lang: csharp label: .NET source: >- using System; using System.Text.Json; using Didit; // Reads DIDIT_API_KEY. using var client = new DiditClient(); var result = await client.Sessions.CreateKybPartyDraftAsync("33333333-4444-5555-6666-777777777777", new SessionsCreateKybPartyDraftParams { EntityType = "person", FirstName = "Ana", LastName = "Lopez", Roles = new SessionsCreateKybPartyDraftParamsRoles[] { "ubo", "director" }, DateOfBirth = "1984-06-12", Email = "ana.lopez@example.com", OwnershipPercent = 60.0, Nationality = "MEX", }); Console.WriteLine(JsonSerializer.Serialize(result)); components: securitySchemes: ApiKeyAuth: type: apiKey in: header name: x-api-key description: >- Your application's API key, from Developers -> API keys in the Business Console. The primary key has full access. A named key can be scoped: none, read or write per resource, limited to some workflows or to approved sessions, to a list of IP addresses, and to an expiry date. 401 means the key is missing, wrong, revoked or expired; 403 means the key has no access to this resource or action, or the request came from an address outside its IP list; 404 on a session route means the session is outside the key's workflows or statuses. A key without media access receives image, video and PDF URLs as null, and a key without sessions write receives session links and tokens as null. See https://docs.didit.me/console/api-keys. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.