> This page is for API.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.spreadspace.app/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.spreadspace.app/_mcp/server.

# Get filing document pages

GET https://api.spreadspace.app/api/public/filings/{filing_id}/documents/{document_id}/pages

Returns a filing document's page images: the pages rendered from the filing's own PDF, in order, each with its size in PDF points and a link good for `expires_in` seconds (ask again for fresh links). The first ask for a document starts its render and answers 202 with `status` rendering; ask again in a few seconds until the pages answer. A filing or document the store does not hold, a document of an older extraction, or one with no rendered PDF is 404. Needs a Market research subscription and `markets:read`.

Requires the `markets:read` scope. Rate limit: 200 requests per minute per key (the `api` lane).

Reference: https://docs.spreadspace.app/api/api-reference/filings/pages

## Authentication

- `Authorization` header (bearer token, required) — Bearer token. Use `ss_live_…` for live data or `ss_test_…` for the sandbox (test mode). See [Authentication](https://docs.spreadspace.app/api/authentication).

## Request

### Path parameters

- `filing_id` (string, required) — The filing's id: its SEC accession number.
- `document_id` (string, required) — The document's id, from the company's documents list.

### Query parameters

- `variant` (string, optional) — The page set: `original`, the only one a filing holds; absent reads as original.

### Headers

- `SpreadSpace-Version` (string, optional) — Pin the API version, e.g. `2026-10-07`. Omit to get the latest. See [Versioning](https://docs.spreadspace.app/api/versioning).

## Response

### 200

OK

- `accession` (string, required) — The filing's SEC accession number.
- `document_id` (string, required) — The document's id in the store.
- `render_version` (string, required) — The render the pages come from; a new render lands under a new one.
- `available_variants` (list of string, required) — The page sets the render holds; original today.
- `pages` (list of PublicArtifactPage, required) — The pages in order, each with its size in PDF points and its link.
- `expires_in` (integer, required) — How long the links stay valid, in seconds; ask again for fresh ones.

### 202

Accepted

- `status` (string, required) — Always rendering.

## Errors

### 400 Bad Request Error

Bad Request

- `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope.

### 401 Unauthorized Error

Unauthorized: the bearer token or API key is missing or invalid.

- `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope.

### 403 Forbidden Error

Forbidden: authentication succeeded but the caller is not permitted to perform this action, for example an API key missing the required scope, an embed session reaching a loan it was not minted for, or a feature outside the workspace's plan.

- `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope.

### 404 Not Found Error

Not Found

- `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope.

### 429 Too Many Requests Error

Too many requests: the rate limit was hit, or an idempotency-key replay is still in progress.

- `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope.

### 500 Internal Server Error

Internal server error: an unexpected failure. Quote the `request_id` in support tickets. A mutation sent with an `Idempotency-Key` replays this fault under that key rather than re-running; confirm the resource state before resending with a new key.

- `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope.

## Types

### PublicArtifactPage

One rendered page.

- `index` (integer, required) — The page's place in the document, from 0.
- `width_pts` (double, required) — The page's width in PDF points.
- `height_pts` (double, required) — The page's height in PDF points.
- `url` (string, required) — A short-lived link to the page image.

### ApiErrorBody

Inner body of the canonical API error envelope.

- `type` (enum, required) — Stable error type identifier, one of the values listed. Pattern-match on this value, not the human-readable message. A later version may add a value; treat one you do not know by its HTTP status.
  - Allowed values: `billing_required`, `business_email_required`, `conflict`, `counterparty_not_in_plan`, `cursor_expired`, `custom_visual_limit_exceeded`, `doc_too_large`, `embed_not_in_plan`, `embed_origin_not_allowed`, `embed_scope_exceeds_key`, `embed_scope_not_allowed`, `embed_session_binding_mismatch`, `embed_session_not_found`, `embed_token_expired`, `forbidden`, `geometry_plan_denied`, `html_upload_disabled`, `idempotency_in_progress`, `idempotency_request_mismatch`, `idempotency_response_too_large`, `insufficient_credits`, `insufficient_scope`, `internal_error`, `invalid_code`, `invalid_cursor`, `invalid_embed_token`, `invalid_include`, `invalid_limit`, `invalid_request`, `invalid_session_handle`, `invalid_version`, `key_expired`, `key_revoked`, `last_item`, `license_assigned`, `license_holder_has_license`, `license_none_free`, `license_reassign_window`, `licenses_assigned`, `markets_api_required`, `memo_locked`, `memo_not_locked`, `mfa_enrollment_required`, `mode_mismatch`, `not_found`, `payload_too_large`, `payment_failed`, `pii_claim_required`, `rate_limited`, `render_failed`, `request_cancelled`, `research_not_in_plan`, `resource_gone`, `same_origin_required`, `sandbox_missing`, `sandbox_organization`, `scope_not_in_product`, `scope_state_changed`, `session_handle_already_used`, `session_handle_expired`, `session_handle_revoked`, `spend_cap_reached`, `spread_already_finalized`, `spread_limit`, `spread_locked`, `spread_not_finalized`, `spread_not_locked`, `spread_not_ready`, `spread_template_limit_exceeded`, `spreads_not_in_plan`, `spreadsheet_upload_disabled`, `statement_mapping_not_in_plan`, `subscription_required`, `surface_limit_exceeded`, `test_key_remint_required`, `unauthorized`, `unknown_factor`, `unprocessable`, `usage_throttled`, `validation_failed`
- `message` (string, required) — Human-readable error message. Subject to wording changes; do not parse.
- `code` (string, optional) — A finer, stable identifier within `type`, on the errors that carry one; absent otherwise. Pattern-match on it like `type`. The upload presign answers `not_found` with `loan_not_found` and `invalid_request` with `borrower_loan_mismatch`.
- `request_id` (string, optional, nullable) — Per-request correlation ID (matches `X-Request-ID` response header). Quote in support tickets.
- `details` (map from string to string, optional, nullable) — Structured detail. Some error types populate documented keys in every environment: a version conflict (409) carries `current_version`, the version the resource is actually at, so the client can reload and re-apply. Free-form diagnostic detail beyond those keys appears in development environments only. An `insufficient_credits` 402 carries `balance_usd`, `reserved_usd`, `in_flight_docs`, `incoming_docs` and `per_doc_reservation_usd` as decimal strings.

## Examples

**Response**

```json
{
  "accession": "0009900077-26-000012",
  "document_id": "d0c0000000000000000000b5",
  "render_version": "r7",
  "available_variants": [
    "original"
  ],
  "pages": [
    {
      "index": 0,
      "width_pts": 612,
      "height_pts": 792,
      "url": "https://filings.example/public-artifacts/0009900077-26-000012/r7/d0c0000000000000000000b5/page_001.webp?X-Amz-Expires=600"
    },
    {
      "index": 1,
      "width_pts": 612,
      "height_pts": 792,
      "url": "https://filings.example/public-artifacts/0009900077-26-000012/r7/d0c0000000000000000000b5/page_002.webp?X-Amz-Expires=600"
    }
  ],
  "expires_in": 600
}
```

**SDK Code**

```typescript
import { SpreadSpace } from '@spreadspace/sdk';

const client = new SpreadSpace({ apiKey: process.env.SPREADSPACE_API_KEY! });

const answer = await client.filings.pages('0009900077-26-000012', 'd0c0000000000000000000b5', { variant: 'original' });
console.log('pages' in answer ? answer.pages.length : answer.status);

```

```python
import os

from spreadspace import SpreadSpace

client = SpreadSpace(api_key=os.environ["SPREADSPACE_API_KEY"])

answer = client.filings.pages("0009900077-26-000012", "d0c0000000000000000000b5", variant="original")
print(answer)

```

```csharp
using SpreadSpace;

using var client = new SpreadSpaceClient(Environment.GetEnvironmentVariable("SPREADSPACE_API_KEY"));

var manifest = await client.Filings.PagesAsync("0009900077-26-000012", "d0c0000000000000000000b5", variant: "original");
Console.WriteLine(manifest is null ? "rendering" : $"{manifest.Pages.Count} pages");

```

```go
package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.spreadspace.app/api/public/filings/0009900077-26-000012/documents/d0c0000000000000000000b5/pages?variant=original"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("SpreadSpace-Version", "2026-10-07")
	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

```ruby
require 'uri'
require 'net/http'

url = URI("https://api.spreadspace.app/api/public/filings/0009900077-26-000012/documents/d0c0000000000000000000b5/pages?variant=original")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["SpreadSpace-Version"] = '2026-10-07'
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body
```

```java
import com.mashape.unirest.http.HttpResponse;
import com.mashape.unirest.http.Unirest;

HttpResponse<String> response = Unirest.get("https://api.spreadspace.app/api/public/filings/0009900077-26-000012/documents/d0c0000000000000000000b5/pages?variant=original")
  .header("SpreadSpace-Version", "2026-10-07")
  .header("Authorization", "Bearer <token>")
  .asString();
```

```php
<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('GET', 'https://api.spreadspace.app/api/public/filings/0009900077-26-000012/documents/d0c0000000000000000000b5/pages?variant=original', [
  'headers' => [
    'Authorization' => 'Bearer <token>',
    'SpreadSpace-Version' => '2026-10-07',
  ],
]);

echo $response->getBody();
```

```swift
import Foundation

let headers = [
  "SpreadSpace-Version": "2026-10-07",
  "Authorization": "Bearer <token>"
]

let request = NSMutableURLRequest(url: NSURL(string: "https://api.spreadspace.app/api/public/filings/0009900077-26-000012/documents/d0c0000000000000000000b5/pages?variant=original")! as URL,
                                        cachePolicy: .useProtocolCachePolicy,
                                    timeoutInterval: 10.0)
request.httpMethod = "GET"
request.allHTTPHeaderFields = headers

let session = URLSession.shared
let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in
  if (error != nil) {
    print(error as Any)
  } else {
    let httpResponse = response as? HTTPURLResponse
    print(httpResponse)
  }
})

dataTask.resume()
```