> ## Documentation Index > Fetch the complete documentation index at: https://docs.didit.me/llms.txt > Use this file to discover all available pages before exploring further. # List KYB Party Drafts API > List the key people you are preparing for a KYB session before you submit them. ## OpenAPI ````yaml GET /v3/session/{sessionId}/kyb/parties/drafts/ openapi: 3.0.0 info: version: 3.0.0 title: Didit Verification API description: Identity verification API. Authenticate with x-api-key header. servers: - url: https://verification.didit.me security: [] tags: [] paths: /v3/session/{sessionId}/kyb/parties/drafts/: get: tags: - Sessions summary: List the KYB party drafts description: >- List the parties you are preparing for this KYB session, oldest first. A draft is not a declared party: it does not appear in the decision or the console and creates no verification session until you submit it with `POST /v3/session/{sessionId}/kyb/parties/submit/`. Requires `write:businesses`. operationId: get_v3_session_kyb_party_drafts parameters: - name: sessionId in: path required: true description: >- UUID of the Business Verification (KYB) session. It must belong to the application of the API key. schema: type: string format: uuid example: 33333333-4444-5555-6666-777777777777 - name: node_id in: query required: false description: >- Workflow node of the KYB step. Only needed when the workflow has more than one KYB node; by default Didit uses the session's own node. schema: type: string responses: '200': description: The stored drafts. content: application/json: schema: type: object properties: parties: type: array items: type: object required: - draft_id - created_at - updated_at - party properties: draft_id: type: string format: uuid created_at: type: string format: date-time updated_at: type: string format: date-time party: type: object required: - entity_type - nationality properties: entity_type: type: string enum: - person - company description: Whether the party is an individual or a company. full_name: type: string maxLength: 255 description: >- Full name of a person. Send it, or `first_name` and `last_name`. first_name: type: string maxLength: 128 last_name: type: string maxLength: 128 role: type: string enum: - director - non_executive_director - secretary - chairman - ubo - shareholder - representative - founder - legal_advisor - authorized_signatory - trustee - beneficiary - settlor - protector - company_officer - investor - other description: >- Role the party holds. Interchangeable with `roles`; when both are sent they are merged. roles: type: array items: type: string enum: - director - non_executive_director - secretary - chairman - ubo - shareholder - representative - founder - legal_advisor - authorized_signatory - trustee - beneficiary - settlor - protector - company_officer - investor - other description: >- Every role the party holds. A person needs at least one role (here or in `role`). position: type: string maxLength: 128 description: Job title of a person. date_of_birth: type: string format: date nullable: true company_name: type: string maxLength: 255 description: >- Name of a company party. Required when `entity_type` is `company`. registration_number: type: string maxLength: 100 description: Registration number of a company party. email: type: string format: email description: >- Where the verification link is sent. Required when the party has to complete verification, which depends on the role settings and ownership thresholds of the workflow. ownership_percent: type: number nullable: true description: Share of the company the party owns. nationality: type: string maxLength: 100 description: >- Nationality of a person, or country of incorporation of a company. Required for every party. phone_number: type: string maxLength: 32 custom_fields: type: object additionalProperties: true description: Workflow-defined extra fields. skip_verification: type: boolean default: false description: >- Ask to skip this party's verification. Honoured only when the party's role allows skipping in the workflow's Key People settings. node_id: type: string nullable: true example: parties: - draft_id: 5b0d7a52-9d3e-4f0c-8c6a-0e5f3a1b2c4d created_at: '2026-10-31T10:00:00Z' updated_at: '2026-10-31T10:00:00Z' party: entity_type: person first_name: Ana last_name: Lopez roles: - ubo - director ownership_percent: 60 nationality: MEX email: ana.lopez@example.com date_of_birth: '1984-06-12' node_id: node_kyb_key_people '401': description: >- The scoped API key has expired. This is the only case that returns `401`: a missing, invalid or revoked key returns `403`. content: application/json: schema: type: object properties: detail: type: string description: Human-readable error message. examples: Expired key: summary: The key's expiry date has passed value: detail: This API key has expired. '403': description: >- Authentication or authorization failure. Missing, invalid and revoked keys return `403` (not `401`); so do a key of another application, a scoped key without the permission this endpoint needs, and a request from outside the key's IP allowlist. Distinguish them by `detail`. content: application/json: schema: type: object properties: detail: type: string description: Human-readable error message. examples: Missing or invalid credentials: summary: No x-api-key header, or the key failed validation value: detail: >- Authentication credentials were not provided or are invalid. Other application: summary: >- A valid key that belongs to a different application than the session value: detail: You do not have permission to perform this action. Scoped key without decisions write: summary: 'Scoped key lacks decisions: write' value: detail: This API key has no write access to decisions. IP not allowed: summary: Request from outside the key's IP allowlist value: detail: This API key can't be used from this IP address. '404': description: >- The session does not exist, was deleted, belongs to another application or is outside a scoped key's limits; no detail distinguishes them. content: application/json: schema: type: object properties: detail: type: string description: Human-readable error message. example: detail: Session not found. security: - ApiKeyAuth: [] x-codeSamples: - lang: python label: Python source: |- from didit import Didit # Reads DIDIT_API_KEY. client = Didit() result = client.sessions.list_kyb_party_drafts( "33333333-4444-5555-6666-777777777777", ) print(result) - lang: javascript label: Node.js source: >- import Didit from "@didit-protocol/sdk-node"; // Reads DIDIT_API_KEY. const didit = new Didit(); const result = await didit.sessions.listKybPartyDrafts("33333333-4444-5555-6666-777777777777"); console.log(result); - lang: go label: Go source: "ctx := context.Background()\n// Reads DIDIT_API_KEY.\nclient := didit.NewClient()\n\nresult, err := client.Sessions.ListKYBPartyDrafts(ctx, \"33333333-4444-5555-6666-777777777777\", didit.SessionsListKYBPartyDraftsParams{})\nif err != nil {\n\tlog.Fatal(err)\n}\nfmt.Printf(\"%+v\\n\", result)" - lang: java label: Java source: >- import me.didit.Didit; // Reads DIDIT_API_KEY. Didit client = new Didit(); var result = client.sessions().listKybPartyDrafts("33333333-4444-5555-6666-777777777777"); System.out.println(result); - lang: php label: PHP source: >- sessions->listKybPartyDrafts('33333333-4444-5555-6666-777777777777'); print_r($result->toArray()); - lang: ruby label: Ruby source: >- require "didit" # Reads DIDIT_API_KEY. didit = Didit::Client.new result = didit.sessions.list_kyb_party_drafts("33333333-4444-5555-6666-777777777777") puts result.to_h - lang: csharp label: .NET source: >- using System; using System.Text.Json; using Didit; // Reads DIDIT_API_KEY. using var client = new DiditClient(); var result = await client.Sessions.ListKybPartyDraftsAsync("33333333-4444-5555-6666-777777777777"); Console.WriteLine(JsonSerializer.Serialize(result)); components: securitySchemes: ApiKeyAuth: type: apiKey in: header name: x-api-key description: >- Your application's API key, from Developers -> API keys in the Business Console. The primary key has full access. A named key can be scoped: none, read or write per resource, limited to some workflows or to approved sessions, to a list of IP addresses, and to an expiry date. 401 means the key is missing, wrong, revoked or expired; 403 means the key has no access to this resource or action, or the request came from an address outside its IP list; 404 on a session route means the session is outside the key's workflows or statuses. A key without media access receives image, video and PDF URLs as null, and a key without sessions write receives session links and tokens as null. See https://docs.didit.me/console/api-keys. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.