> This page is for API. > For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.spreadspace.app/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.spreadspace.app/_mcp/server. # List EBITDA add-back selections GET https://api.spreadspace.app/api/borrowers/{borrower_id}/extractions/fin-ebitda-addbacks Lists the loan's saved company-reported EBITDA add-back selections for every company scope in one read; group rows by `entity_key` (an empty string is the whole-loan scope). `loan_id` is required. `added_by` is resolved on this read. Requires the `extractions:read` scope. Rate limit: 200 requests per minute per key (the `api` lane). Reference: https://docs.spreadspace.app/api/api-reference/extractions/get-fin-ebitda-addbacks ## Authentication - `Authorization` header (bearer token, required) — Bearer token. Use `ss_live_…` for live data or `ss_test_…` for the sandbox (test mode). See [Authentication](https://docs.spreadspace.app/api/authentication). ## Request ### Path parameters - `borrower_id` (string, required) — The borrower's id. ### Query parameters - `loan_id` (string, required) — The loan's id. Required. ### Headers - `SpreadSpace-Version` (string, optional) — Pin the API version, e.g. `2026-10-07`. Omit to get the latest. See [Versioning](https://docs.spreadspace.app/api/versioning). ## Response ### 200 OK - `selections` (list of FinEbitdaAddbackDto, required) ## Errors ### 400 Bad Request Error Bad request: validation failed, the cursor is malformed, or the API version is unknown. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 401 Unauthorized Error Unauthorized: the bearer token or API key is missing or invalid. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 402 Payment Required Error Payment required: the standard error envelope with `type` `subscription_required` when the workspace has no active or trialing subscription, or `billing_required` where a plan entitlement applies. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 403 Forbidden Error Forbidden: authentication succeeded but the caller is not permitted to perform this action, for example an API key missing the required scope, an embed session reaching a loan it was not minted for, or a feature outside the workspace's plan. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 404 Not Found Error Not found: the resource does not exist or is not visible to the calling tenant. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 429 Too Many Requests Error Too many requests: the rate limit was hit, or an idempotency-key replay is still in progress. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 500 Internal Server Error Internal server error: an unexpected failure. Quote the `request_id` in support tickets. A mutation sent with an `Idempotency-Key` replays this fault under that key rather than re-running; confirm the resource state before resending with a new key. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ## Types ### FinEbitdaAddbackDto - `key` (string, required) — The selected line's opaque key: `fin_pl:<label path>` for a statement line, or `writein:<uuid>` for an analyst write-in. Pass it back unchanged. - `label` (string, required) — Display label captured when the selection was made; shown when the key no longer resolves against the current extraction. - `source` (string, required) — Candidate source kind: `stmt_expense` | `stmt_income` | `write_in`. Sets the add-back direction: an expense pick folds back into adjusted EBITDA, an income pick comes out. - `entity_key` (string, optional, nullable) — Which of the loan's companies the pick belongs to: an entity key (`business:<folded name>`), or `""` for the whole-loan scope. Read-only on the wire: the GET returns every scope's rows in one pass and callers group by this field; the PUT takes its scope from the `entity_key` query parameter, not from the body, and ignores this field. - `years` (list of string, optional, nullable) — Fiscal years the pick applies to (four-digit year labels, e.g. `"2023"`). Null means every year; new saves always carry explicit years. - `write_in_amounts` (map from string to string, optional, nullable) — Write-in amounts by four-digit fiscal year label (source `write_in` only): the analyst's free-typed signed dollars. Positive folds into adjusted EBITDA, negative comes out. Null on every statement-resolved selection. - `added_by` (string, optional, nullable) — Display name of the analyst who first added this selection, resolved from the row's author at read time, `write_in` selections only. Null when the author no longer resolves or the caller may not see names. Read-only: ignored on PUT. ### ApiErrorBody Inner body of the canonical API error envelope. - `type` (string, required) — Stable error type identifier. Pattern-match on this value, not the human-readable message. - `message` (string, required) — Human-readable error message. Subject to wording changes; do not parse. - `request_id` (string, optional, nullable) — Per-request correlation ID (matches `X-Request-ID` response header). Quote in support tickets. - `details` (map from string to string, optional, nullable) — Structured detail. Some error types populate documented keys in every environment: a version conflict (409) carries `current_version`, the version the resource is actually at, so the client can reload and re-apply. Free-form diagnostic detail beyond those keys appears in development environments only. An `insufficient_credits` 402 carries `balance_usd`, `reserved_usd`, `in_flight_docs`, `incoming_docs` and `per_doc_reservation_usd` as decimal strings. ## Examples **Response** ```json { "selections": [ { "key": "fin_pl:Expenses > Officer compensation", "label": "Officer compensation", "source": "stmt_expense", "entity_key": "", "years": [ "2023" ], "write_in_amounts": null, "added_by": null }, { "key": "writein:6f1d2c3b-4a59-4e8f-9c0d-1e2f3a4b5c6d", "label": "One-time legal settlement", "source": "write_in", "entity_key": "", "years": [ "2023" ], "write_in_amounts": { "2023": "12500.00" }, "added_by": "Avery Morgan" } ] } ``` **SDK Code** ```python import requests url = "https://api.spreadspace.app/api/borrowers/9f8e7d6c5b4a3210a1b2c3d4/extractions/fin-ebitda-addbacks" querystring = {"loan_id":"9f8b7c6d5e4a3b2c1d0e4f5a"} headers = {"Authorization": "Bearer "} response = requests.get(url, headers=headers, params=querystring) print(response.json()) ``` ```javascript const url = 'https://api.spreadspace.app/api/borrowers/9f8e7d6c5b4a3210a1b2c3d4/extractions/fin-ebitda-addbacks?loan_id=9f8b7c6d5e4a3b2c1d0e4f5a'; const options = {method: 'GET', headers: {Authorization: 'Bearer '}}; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go package main import ( "fmt" "net/http" "io" ) func main() { url := "https://api.spreadspace.app/api/borrowers/9f8e7d6c5b4a3210a1b2c3d4/extractions/fin-ebitda-addbacks?loan_id=9f8b7c6d5e4a3b2c1d0e4f5a" req, _ := http.NewRequest("GET", url, nil) req.Header.Add("Authorization", "Bearer ") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby require 'uri' require 'net/http' url = URI("https://api.spreadspace.app/api/borrowers/9f8e7d6c5b4a3210a1b2c3d4/extractions/fin-ebitda-addbacks?loan_id=9f8b7c6d5e4a3b2c1d0e4f5a") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Get.new(url) request["Authorization"] = 'Bearer ' response = http.request(request) puts response.read_body ``` ```java import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.get("https://api.spreadspace.app/api/borrowers/9f8e7d6c5b4a3210a1b2c3d4/extractions/fin-ebitda-addbacks?loan_id=9f8b7c6d5e4a3b2c1d0e4f5a") .header("Authorization", "Bearer ") .asString(); ``` ```php request('GET', 'https://api.spreadspace.app/api/borrowers/9f8e7d6c5b4a3210a1b2c3d4/extractions/fin-ebitda-addbacks?loan_id=9f8b7c6d5e4a3b2c1d0e4f5a', [ 'headers' => [ 'Authorization' => 'Bearer ', ], ]); echo $response->getBody(); ``` ```csharp using RestSharp; var client = new RestClient("https://api.spreadspace.app/api/borrowers/9f8e7d6c5b4a3210a1b2c3d4/extractions/fin-ebitda-addbacks?loan_id=9f8b7c6d5e4a3b2c1d0e4f5a"); var request = new RestRequest(Method.GET); request.AddHeader("Authorization", "Bearer "); IRestResponse response = client.Execute(request); ``` ```swift import Foundation let headers = ["Authorization": "Bearer "] let request = NSMutableURLRequest(url: NSURL(string: "https://api.spreadspace.app/api/borrowers/9f8e7d6c5b4a3210a1b2c3d4/extractions/fin-ebitda-addbacks?loan_id=9f8b7c6d5e4a3b2c1d0e4f5a")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "GET" request.allHTTPHeaderFields = headers let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```