> This page is for API. > For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.spreadspace.app/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.spreadspace.app/_mcp/server. # List filing statements GET https://api.spreadspace.app/api/public/filings/{filing_id}/financial-statements Lists the statements behind a filing's documents: each named document's report data, a JSON object whose shape follows the document's category. One `document_ids` query parameter per id, at most 60 a call; an id that is not one of the filing's current documents is left out. Not paged. A filing the store does not hold is 404. Needs a Market research subscription and `markets:read`. Requires the `markets:read` scope. Rate limit: 200 requests per minute per key (the `api` lane). Reference: https://docs.spreadspace.app/api/api-reference/filings/financial-statements ## Authentication - `Authorization` header (bearer token, required) — Bearer token. Use `ss_live_…` for live data or `ss_test_…` for the sandbox (test mode). See [Authentication](https://docs.spreadspace.app/api/authentication). ## Request ### Path parameters - `filing_id` (string, required) — The filing's id: its SEC accession number, ten digits, two digits and six digits joined by hyphens. ### Query parameters - `document_ids` (list of string, optional) — The documents to read, one `document_ids` query parameter per id, at most 60; ids from the filing's documents list. ### Headers - `SpreadSpace-Version` (string, optional) — Pin the API version, e.g. `2026-10-07`. Omit to get the latest. See [Versioning](https://docs.spreadspace.app/api/versioning). ## Response ### 200 OK - `data` (list of ResearchStatement, required) - `has_more` (boolean, required) - `next_cursor` (string, optional, nullable) ## Errors ### 400 Bad Request Error Bad Request - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 401 Unauthorized Error Unauthorized: the bearer token or API key is missing or invalid. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 403 Forbidden Error Forbidden: authentication succeeded but the caller is not permitted to perform this action, for example an API key missing the required scope, an embed session reaching a loan it was not minted for, or a feature outside the workspace's plan. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 404 Not Found Error Not Found - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 429 Too Many Requests Error Too many requests: the rate limit was hit, or an idempotency-key replay is still in progress. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 500 Internal Server Error Internal server error: an unexpected failure. Quote the `request_id` in support tickets. A mutation sent with an `Idempotency-Key` replays this fault under that key rather than re-running; confirm the resource state before resending with a new key. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ## Types ### ResearchStatement One document's statement, in the shape the loan statements read serves. - `document_id` (string, required) — The document's id in the store. - `document_category` (string, required) — The document's category. - `report_data` (ResearchStatementReportData, required) — The document's report data, a JSON object whose shape follows the document's category: a statement's lines by period, a debt schedule's rows and columns, a supporting table's rows under dated columns. ### ApiErrorBody Inner body of the canonical API error envelope. - `type` (enum, required) — Stable error type identifier, one of the values listed. Pattern-match on this value, not the human-readable message. A later version may add a value; treat one you do not know by its HTTP status. - Allowed values: `billing_required`, `business_email_required`, `conflict`, `counterparty_not_in_plan`, `cursor_expired`, `custom_visual_limit_exceeded`, `doc_too_large`, `embed_not_in_plan`, `embed_origin_not_allowed`, `embed_scope_exceeds_key`, `embed_scope_not_allowed`, `embed_session_binding_mismatch`, `embed_session_not_found`, `embed_token_expired`, `forbidden`, `geometry_plan_denied`, `html_upload_disabled`, `idempotency_in_progress`, `idempotency_request_mismatch`, `idempotency_response_too_large`, `insufficient_credits`, `insufficient_scope`, `internal_error`, `invalid_code`, `invalid_cursor`, `invalid_embed_token`, `invalid_include`, `invalid_limit`, `invalid_request`, `invalid_session_handle`, `invalid_version`, `key_expired`, `key_revoked`, `last_item`, `license_assigned`, `license_holder_has_license`, `license_none_free`, `license_reassign_window`, `licenses_assigned`, `markets_api_required`, `memo_locked`, `memo_not_locked`, `mfa_enrollment_required`, `mode_mismatch`, `not_found`, `payload_too_large`, `payment_failed`, `pii_claim_required`, `rate_limited`, `render_failed`, `request_cancelled`, `research_not_in_plan`, `resource_gone`, `same_origin_required`, `sandbox_missing`, `sandbox_organization`, `scope_not_in_product`, `scope_state_changed`, `session_handle_already_used`, `session_handle_expired`, `session_handle_revoked`, `spend_cap_reached`, `spread_already_finalized`, `spread_limit`, `spread_locked`, `spread_not_finalized`, `spread_not_locked`, `spread_not_ready`, `spread_template_limit_exceeded`, `spreads_not_in_plan`, `spreadsheet_upload_disabled`, `statement_mapping_not_in_plan`, `subscription_required`, `surface_limit_exceeded`, `test_key_remint_required`, `unauthorized`, `unknown_factor`, `unprocessable`, `usage_throttled`, `validation_failed` - `message` (string, required) — Human-readable error message. Subject to wording changes; do not parse. - `code` (string, optional) — A finer, stable identifier within `type`, on the errors that carry one; absent otherwise. Pattern-match on it like `type`. The upload presign answers `not_found` with `loan_not_found` and `invalid_request` with `borrower_loan_mismatch`. - `request_id` (string, optional, nullable) — Per-request correlation ID (matches `X-Request-ID` response header). Quote in support tickets. - `details` (map from string to string, optional, nullable) — Structured detail. Some error types populate documented keys in every environment: a version conflict (409) carries `current_version`, the version the resource is actually at, so the client can reload and re-apply. Free-form diagnostic detail beyond those keys appears in development environments only. An `insufficient_credits` 402 carries `balance_usd`, `reserved_usd`, `in_flight_docs`, `incoming_docs` and `per_doc_reservation_usd` as decimal strings. ### ResearchStatementReportData The document's report data, a JSON object whose shape follows the document's category: a statement's lines by period, a debt schedule's rows and columns, a supporting table's rows under dated columns. ## Examples **Response** ```json { "data": [ { "document_id": "d0c0000000000000000000b6", "document_category": "profit_and_loss", "report_data": { "entity": "Larkspur Mills Inc", "title": "Consolidated Statements of Operations", "period": "Fiscal years ended December 31, 2025 and 2024", "period_source": null, "periods": [ { "label": "FY2025", "coverage": "January - December 2025" }, { "label": "FY2024", "coverage": "January - December 2024" } ], "billing_years": 2, "columns": 2, "lines": [ { "label": "Net sales", "depth": 0, "values": [ "418250000", "402110000" ] }, { "label": "Cost of sales", "depth": 0, "values": [ "288592500", "281477000" ] }, { "label": "Gross profit", "depth": 0, "values": [ "129657500", "120633000" ] }, { "label": "Operating income", "depth": 0, "values": [ "46007500", "40211000" ] }, { "label": "Net income", "depth": 0, "values": [ "33462000", "28950000" ] } ] } } ], "has_more": false, "next_cursor": null } ``` **SDK Code** ```typescript import { SpreadSpace } from '@spreadspace/sdk'; const client = new SpreadSpace({ apiKey: process.env.SPREADSPACE_API_KEY! }); const statements = await client.filings.financialStatements('0009900077-26-000012', { document_ids: ['d0c0000000000000000000b6'] }); for (const statement of statements.data) console.log(statement.document_id, statement.document_category); ``` ```python import os from spreadspace import SpreadSpace client = SpreadSpace(api_key=os.environ["SPREADSPACE_API_KEY"]) statements = client.filings.financial_statements("0009900077-26-000012", ["d0c0000000000000000000b6"]) for statement in statements["data"]: print(statement["document_id"], statement["document_category"]) ``` ```csharp using SpreadSpace; using var client = new SpreadSpaceClient(Environment.GetEnvironmentVariable("SPREADSPACE_API_KEY")); var statements = await client.Filings.FinancialStatementsAsync("0009900077-26-000012", ["d0c0000000000000000000b6"]); foreach (var statement in statements.Data) Console.WriteLine($"{statement.DocumentId} {statement.DocumentCategory}"); ``` ```go package main import ( "fmt" "net/http" "io" ) func main() { url := "https://api.spreadspace.app/api/public/filings/0009900077-26-000012/financial-statements?document_ids=%5B%22d0c0000000000000000000b6%22%5D" req, _ := http.NewRequest("GET", url, nil) req.Header.Add("Authorization", "Bearer ") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby require 'uri' require 'net/http' url = URI("https://api.spreadspace.app/api/public/filings/0009900077-26-000012/financial-statements?document_ids=%5B%22d0c0000000000000000000b6%22%5D") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Get.new(url) request["Authorization"] = 'Bearer ' response = http.request(request) puts response.read_body ``` ```java import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.get("https://api.spreadspace.app/api/public/filings/0009900077-26-000012/financial-statements?document_ids=%5B%22d0c0000000000000000000b6%22%5D") .header("Authorization", "Bearer ") .asString(); ``` ```php request('GET', 'https://api.spreadspace.app/api/public/filings/0009900077-26-000012/financial-statements?document_ids=%5B%22d0c0000000000000000000b6%22%5D', [ 'headers' => [ 'Authorization' => 'Bearer ', ], ]); echo $response->getBody(); ``` ```swift import Foundation let headers = ["Authorization": "Bearer "] let request = NSMutableURLRequest(url: NSURL(string: "https://api.spreadspace.app/api/public/filings/0009900077-26-000012/financial-statements?document_ids=%5B%22d0c0000000000000000000b6%22%5D")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "GET" request.allHTTPHeaderFields = headers let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```