> ## Documentation Index > Fetch the complete documentation index at: https://docs.didit.me/llms.txt > Use this file to discover all available pages before exploring further. # 企业验证 PDF 报告 API > 下载 Didit 已完成的单次企业验证（KYB）会话 PDF 报告，包含登记数据、关键人员、股东、证件、AML 筛查及审核结果。 生成企业会话 PDF 的 API 提示词 将提示词复制到剪贴板 \

\`Download the PDF report of one finished Didit business verification (KYB) session.

Endpoint:
GET https://verification.didit.me/v3/organization/{organization_id}/application/{application_id}/businesses/{business_session_id}/pdf/

Authentication:
Use the x-api-key header with my Didit API key. A scoped key needs businesses: read and media: read; a key limited to some workflows or to approved sessions can't call this endpoint. application_id must be the application the key belongs to.

Goal:
\- Store an audit-ready KYB report for my compliance archive, or attach it to a case or regulator request.

Behavior:
\- business_session_id is the session_id of the KYB session.
\- The session must be "Approved", "Declined" or "In Review"; any other status returns 403.
\- The body is binary application/pdf, not JSON. Content-Disposition: attachment; filename=business_.pdf.
\- The report covers company registry data, key people and beneficial owners, documents, AML results and the other workflow features, plus the session's tags and reviews. With white-label customization on, it uses my logo and privacy policy URL.
\- Rendered on every call: store the file instead of fetching it repeatedly.

Example call:
curl --fail -X GET "https://verification.didit.me/v3/organization/11111111-2222-3333-4444-555555555555/application/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee/businesses/c2d3e4f5-0617-4829-9a3b-4c5d6e7f8091/pdf/" \
-H "x-api-key: YOUR_API_KEY" \
\--output business-report.pdf

What to read from the response:
\- The PDF bytes. Do not parse the body as JSON.
\- Content-Disposition - the suggested file name.

Failure modes:
\- 401 - the API key has expired.
\- 403 - {"detail": "You can only generate a PDF for sessions in review, declined or approved."} when the session is not finished; {"detail": "Authentication credentials were not provided or are invalid."} for a missing key (a wrong, revoked or expired key gets 401); {"detail": "You do not have permission to perform this action."} for a key of another application; a scoped key without businesses: read or media: read; a key limited to workflows or approved sessions; a request from outside the key's IP list.
\- 404 - {"detail": "Business session not found."}
\- 429 - more than 600 GET requests per minute with this key.

Side effects: none. Not billed.

For the full integration shape, see /integration/integration-prompt.`

\
粘贴到 [生成 PDF](https://docs.didit.me/zh/sessions-api/generate-pdf.md) 也会生成 KYB 报告。请选择适合您集成方式的一种：此 endpoint 通过您的组织和应用来定位会话，另一个则仅通过会话 ID 定位。> [!NOTE] > > 报告仅在会话状态为 `Approved`、`Declined` 或 `In Review` 时可用。请在请求报告前，先等待接收 `status.updated` [Webhook](https://docs.didit.me/zh/integration/webhooks.md)。## 相关内容- [生成 PDF](https://docs.didit.me/zh/sessions-api/generate-pdf.md) - [导出为 PDF 和 CSV](https://docs.didit.me/zh/console/export-pdf-csv.md) - [KYB 响应架构](https://docs.didit.me/zh/business-verification/response-schema.md) ## OpenAPI ````yaml zh/openapi-25.json GET /v3/organization/{organization_id}/application/{application_id}/businesses/{business_session_id}/pdf/ openapi: 3.0.0 info: version: 3.0.0 title: Didit Verification API description: 身份证件验证 API。使用 x-api-key 请求头进行身份验证。 servers: - url: https://verification.didit.me security: [] tags: [] paths: /v3/organization/{organization_id}/application/{application_id}/businesses/{business_session_id}/pdf/: get: tags: - Businesses summary: 下载企业会话 PDF 报告 description: >- 生成单个企业验证（KYB）会话的 PDF 报告：包含公司登记数据、关键人员和实际受益人、证件、AML 结果及其他工作流功能，以及该会话的标签和审核活动。开启白标自定义后，报告将包含您的徽标和隐私政策 URL。响应体为 PDF 本身（`application/pdf`），而非 JSON。 会话状态必须为 `Approved`、`Declined` 或 `In Review`；任何其他状态都会返回 `403`，因此请先等待 `status.updated` [Webhook](https://docs.didit.me/zh/integration/webhooks)。每次调用都会渲染报告且不计费，因此请存储该文件，避免重复获取。`GET /v3/session/{sessionId}/generate-pdf/` 仅凭会话 ID 即可渲染同类报告。 PDF 报告属于媒体资源：受限范围的 API 密钥需要 `businesses: read` 和 `media: read` 权限，而限制于某些工作流或仅限已通过会话的密钥无法调用该接口。 operationId: get_business_session_pdf parameters: - name: organization_id in: path required: true schema: type: string format: uuid description: 组织 UUID。 example: 11111111-2222-3333-4444-555555555555 - name: application_id in: path required: true schema: type: string format: uuid description: 应用 UUID。必须是该 API 密钥所属的应用：在任何其他应用上使用该密钥都会返回 `403`。 example: aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee - name: business_session_id in: path required: true description: 企业验证（KYB）会话的 `session_id`，与创建会话时返回的一致。属于其他应用的会话将返回 `404`。 schema: type: string format: uuid example: 22222222-3333-4444-5555-666666666666 responses: '200': description: 渲染生成的 PDF，直接以二进制 `application/pdf` 形式返回。 headers: Content-Disposition: description: 始终为 `attachment; filename=business_{business_session_id}.pdf`。 schema: type: string example: >- attachment; filename=business_22222222-3333-4444-5555-666666666666.pdf content: application/pdf: schema: type: string format: binary '401': description: API 密钥已过期。仅创建时设置了到期日期的密钥才会过期；超过该日期后，使用它的每次请求都会返回 `401`。 content: application/json: schema: type: object properties: detail: type: string examples: Expired key: value: detail: This API key has expired. '403': description: >- 请求不被允许或会话未完成。请查看 `detail`：会话状态不是 `Approved`、`Declined` 或 `In Review`；缺失 API 密钥（错误、已撤销或已过期的密钥将收到 `401`）；`application_id` 不属于该密钥对应的应用；权限受限的密钥未包含 `media: read` 或 `businesses: read` 权限；密钥受限于工作流或已通过的会话；或者请求来自该密钥 IP 名单之外。 content: application/json: schema: type: object properties: detail: type: string examples: Session not finished: value: detail: >- You can only generate a PDF for sessions in review, declined or approved. Missing or invalid key: value: detail: >- Authentication credentials were not provided or are invalid. Another application: value: detail: You do not have permission to perform this action. Scoped key without media read: value: detail: This API key has no read access to media. Scoped key without businesses read: value: detail: This API key has no read access to companies. Key limited to workflows or approved sessions: value: detail: >- This API key only reaches sessions inside its workflow or status limits, so it can't use this endpoint. Outside the key's IP list: value: detail: This API key can't be used from this IP address. '404': description: >- 应用中不存在具有此 ID 的企业会话（从未创建、已删除，或归另一个应用所有）。非 UUID 值将返回 `404` HTML 页面，而不是此 JSON 响应正文。 content: application/json: schema: type: object properties: detail: type: string examples: Not found: value: detail: Business session not found. '429': description: 使用此 API 密钥的 GET 请求每分钟超过 600 次。请等待 `Retry-After` 中指定的秒数，然后再重试。 content: application/json: schema: type: object properties: detail: type: string examples: Throttled: value: detail: >- GET request rate limit exceeded. You can make up to 600 requests per minute. headers: Retry-After: description: 距离当前一分钟窗口重置的秒数。 schema: type: integer example: 23 X-RateLimit-Limit: description: 在此预算中每分钟允许的请求数。 schema: type: integer X-RateLimit-Remaining: description: 当前时间窗口内剩余的请求数。 schema: type: integer X-RateLimit-Reset: description: 窗口重置的 Unix 时间。 schema: type: integer security: - ApiKeyAuth: [] x-codeSamples: - lang: curl label: curl source: >- curl --fail -X GET 'https://verification.didit.me/v3/organization/11111111-2222-3333-4444-555555555555/application/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee/businesses/22222222-3333-4444-5555-666666666666/pdf/' \ -H 'x-api-key: YOUR_API_KEY' \ --output business_report.pdf - lang: python label: Python source: |- from didit import Didit # Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID # and DIDIT_APPLICATION_ID. client = Didit() content = client.businesses.generate_session_pdf( "22222222-3333-4444-5555-666666666666", ) with open("download.pdf", "wb") as file: file.write(content) - lang: javascript label: Node.js source: >- import { writeFile } from "node:fs/promises"; import Didit from "@didit-protocol/sdk-node"; // Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID // and DIDIT_APPLICATION_ID. const didit = new Didit(); const content = await didit.businesses.generateSessionPdf("22222222-3333-4444-5555-666666666666"); await writeFile("download.pdf", Buffer.from(await content.arrayBuffer())); - lang: go label: Go source: "ctx := context.Background()\n// Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID\n// and DIDIT_APPLICATION_ID.\nclient := didit.NewClient()\n\nresp, err := client.Businesses.GenerateSessionPDF(ctx, \"22222222-3333-4444-5555-666666666666\")\nif err != nil {\n\tlog.Fatal(err)\n}\ndefer resp.Body.Close()\nfile, err := os.Create(\"download.pdf\")\nif err != nil {\n\tlog.Fatal(err)\n}\ndefer file.Close()\nif _, err := io.Copy(file, resp.Body); err != nil {\n\tlog.Fatal(err)\n}" - lang: java label: Java source: >- import java.nio.file.Path; import me.didit.Didit; // Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID // and DIDIT_APPLICATION_ID. Didit client = new Didit(); client.businesses().generateSessionPdf("22222222-3333-4444-5555-666666666666") .writeTo(Path.of("download.pdf")); - lang: php label: PHP source: >- businesses->generateSessionPdf('22222222-3333-4444-5555-666666666666'); $content->saveTo('download.pdf'); - lang: ruby label: Ruby source: >- require "didit" # Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID # and DIDIT_APPLICATION_ID. didit = Didit::Client.new content = didit.businesses.generate_session_pdf("22222222-3333-4444-5555-666666666666") File.binwrite("download.pdf", content) - lang: csharp label: .NET source: >- using System; using Didit; // Reads DIDIT_API_KEY, DIDIT_ORGANIZATION_ID // and DIDIT_APPLICATION_ID. using var client = new DiditClient(); var content = await client.Businesses.GenerateSessionPdfAsync("22222222-3333-4444-5555-666666666666"); await content.SaveToAsync("download.pdf"); components: securitySchemes: ApiKeyAuth: type: apiKey in: header name: x-api-key description: >- 您的应用 API 密钥，可在 Business Console 的“开发者 -> API 密钥”中获取。主密钥拥有完整访问权限。指定名称的密钥可设置作用域：针对每个资源设为无权限、只读或读写，限定于特定工作流或已通过的会话、限定于 IP 地址列表，以及设置到期日期。401 表示密钥错误、已撤销或已过期；403 表示未发送密钥、密钥无权访问该资源或操作，或请求来自其 IP 列表之外的地址；在会话路由上返回 404 表示该会话不在该密钥允许的工作流或状态范围内。没有媒体访问权限的密钥获取到的图片、视频和 PDF URL 将为 null；没有会话写入权限的密钥获取到的会话链接和 token 将为 null。请参阅 https://docs.didit.me/console/api-keys。 ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.