> This page is for API. > For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.spreadspace.app/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.spreadspace.app/_mcp/server. # List registrant filings GET https://api.spreadspace.app/api/public/registrants/{registrant_id}/filings Lists every filing the store holds for a registrant, in any state, newest filing date first: each filing's title line, where it stands in the store, the version it was extracted under and what that extraction produced. `form` keeps one form, an amendment with its base form; `year` keeps one year. Not paged. Needs a Market research subscription and `markets:read`. Requires the `markets:read` scope. Rate limit: 200 requests per minute per key (the `api` lane). Reference: https://docs.spreadspace.app/api/api-reference/registrants/filings ## Authentication - `Authorization` header (bearer token, required) — Bearer token. Use `ss_live_…` for live data or `ss_test_…` for the sandbox (test mode). See [Authentication](https://docs.spreadspace.app/api/authentication). ## Request ### Path parameters - `registrant_id` (string, required) — The registrant's id: its SEC CIK, one to ten digits, with or without its leading zeros. ### Query parameters - `form` (string, optional) — The form to keep: 10-K, 10-Q, 8-K or S-1, in any case, an amendment kept with its base form; every form when absent. - `year` (integer, optional) — The year to keep: a filing's report period year, else its filing date year; every year when absent. ### Headers - `SpreadSpace-Version` (string, optional) — Pin the API version, e.g. `2026-10-07`. Omit to get the latest. See [Versioning](https://docs.spreadspace.app/api/versioning). ## Response ### 200 OK - `data` (list of PublicFilingSummary, required) - `has_more` (boolean, required) - `next_cursor` (string, optional, nullable) ## Errors ### 400 Bad Request Error Bad Request - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 401 Unauthorized Error Unauthorized: the bearer token or API key is missing or invalid. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 403 Forbidden Error Forbidden: authentication succeeded but the caller is not permitted to perform this action, for example an API key missing the required scope, an embed session reaching a loan it was not minted for, or a feature outside the workspace's plan. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 404 Not Found Error Not Found - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 429 Too Many Requests Error Too many requests: the rate limit was hit, or an idempotency-key replay is still in progress. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ### 500 Internal Server Error Internal server error: an unexpected failure. Quote the `request_id` in support tickets. A mutation sent with an `Idempotency-Key` replays this fault under that key rather than re-running; confirm the resource state before resending with a new key. - `error` (ApiErrorBody, required) — Inner body of the canonical API error envelope. ## Types ### PublicFilingSummary One filing the store holds for a registrant. - `accession` (string, required) — The filing's SEC accession number. - `form` (string, required) — The form type as filed, such as 10-K, 10-Q, 8-K, S-1 or 10-K/A. - `amendment` (boolean, required) — True when the filing amends an earlier one. - `status` (string, required) — Where the filing stands in the store: fetched, extracted, no_statements (the package tags no financial statements, nothing to extract) or failed. - `document_count` (integer, required) — How many documents the current extraction produced; 0 until extracted. - `primary` (boolean, required) — True when this registrant is the filing's primary filer. - `title` (string, required) — The filing's title line: the form with its fiscal year, quarter or date. - `statements` (list of string, required) — The statement categories the current extraction produced, in document order, supporting tables left out. - `table_count` (integer, required) — How many supporting tables the current extraction produced. - `filing_date` (date, optional, nullable) — The date the filing was made; null when unknown. - `report_period` (date, optional, nullable) — The period the filing reports on; null when unknown. - `extractor_version` (string, optional, nullable) — The version the filing's documents were extracted under; null until extracted. - `extracted_at` (datetime, optional, nullable) — When the extraction completed; null until extracted. - `superseded_by` (string, optional, nullable) — The accession of the filing that replaced this one (an amendment or a later original); null for a current filing. ### ApiErrorBody Inner body of the canonical API error envelope. - `type` (enum, required) — Stable error type identifier, one of the values listed. Pattern-match on this value, not the human-readable message. A later version may add a value; treat one you do not know by its HTTP status. - Allowed values: `billing_required`, `business_email_required`, `conflict`, `counterparty_not_in_plan`, `cursor_expired`, `custom_visual_limit_exceeded`, `doc_too_large`, `embed_not_in_plan`, `embed_origin_not_allowed`, `embed_scope_exceeds_key`, `embed_scope_not_allowed`, `embed_session_binding_mismatch`, `embed_session_not_found`, `embed_token_expired`, `forbidden`, `geometry_plan_denied`, `html_upload_disabled`, `idempotency_in_progress`, `idempotency_request_mismatch`, `idempotency_response_too_large`, `insufficient_credits`, `insufficient_scope`, `internal_error`, `invalid_code`, `invalid_cursor`, `invalid_embed_token`, `invalid_include`, `invalid_limit`, `invalid_request`, `invalid_session_handle`, `invalid_version`, `key_expired`, `key_revoked`, `last_item`, `license_assigned`, `license_holder_has_license`, `license_none_free`, `license_reassign_window`, `licenses_assigned`, `markets_api_required`, `memo_locked`, `memo_not_locked`, `mfa_enrollment_required`, `mode_mismatch`, `not_found`, `payload_too_large`, `payment_failed`, `pii_claim_required`, `rate_limited`, `render_failed`, `request_cancelled`, `research_not_in_plan`, `resource_gone`, `same_origin_required`, `sandbox_missing`, `sandbox_organization`, `scope_not_in_product`, `scope_state_changed`, `session_handle_already_used`, `session_handle_expired`, `session_handle_revoked`, `spend_cap_reached`, `spread_already_finalized`, `spread_limit`, `spread_locked`, `spread_not_finalized`, `spread_not_locked`, `spread_not_ready`, `spread_template_limit_exceeded`, `spreads_not_in_plan`, `spreadsheet_upload_disabled`, `statement_mapping_not_in_plan`, `subscription_required`, `surface_limit_exceeded`, `test_key_remint_required`, `unauthorized`, `unknown_factor`, `unprocessable`, `usage_throttled`, `validation_failed` - `message` (string, required) — Human-readable error message. Subject to wording changes; do not parse. - `code` (string, optional) — A finer, stable identifier within `type`, on the errors that carry one; absent otherwise. Pattern-match on it like `type`. The upload presign answers `not_found` with `loan_not_found` and `invalid_request` with `borrower_loan_mismatch`. - `request_id` (string, optional, nullable) — Per-request correlation ID (matches `X-Request-ID` response header). Quote in support tickets. - `details` (map from string to string, optional, nullable) — Structured detail. Some error types populate documented keys in every environment: a version conflict (409) carries `current_version`, the version the resource is actually at, so the client can reload and re-apply. Free-form diagnostic detail beyond those keys appears in development environments only. An `insufficient_credits` 402 carries `balance_usd`, `reserved_usd`, `in_flight_docs`, `incoming_docs` and `per_doc_reservation_usd` as decimal strings. ## Examples **Response** ```json { "data": [ { "accession": "0009900077-26-000012", "form": "10-K", "amendment": false, "status": "extracted", "document_count": 5, "primary": true, "title": "10-K FY2025", "statements": [ "balance_sheet", "profit_and_loss", "cash_flow_statement" ], "table_count": 2, "filing_date": "2026-03-02", "report_period": "2025-12-31", "extractor_version": "v2026.02.21a-v2026.02.18b", "extracted_at": "2026-03-02T06:15:12.418210+00:00", "superseded_by": null }, { "accession": "0009900077-25-000009", "form": "10-K", "amendment": false, "status": "extracted", "document_count": 5, "primary": true, "title": "10-K FY2024", "statements": [ "balance_sheet", "profit_and_loss", "cash_flow_statement" ], "table_count": 2, "filing_date": "2025-02-27", "report_period": "2024-12-31", "extractor_version": "v2026.02.21a-v2026.02.18b", "extracted_at": "2026-02-22T03:41:56.907114+00:00", "superseded_by": null } ], "has_more": false, "next_cursor": null } ``` **SDK Code** ```typescript import { SpreadSpace } from '@spreadspace/sdk'; const client = new SpreadSpace({ apiKey: process.env.SPREADSPACE_API_KEY! }); const filings = await client.registrants.filings('9900077', { form: '10-K' }); for (const filing of filings.data) console.log(filing.accession, filing.filing_date); ``` ```python import os from spreadspace import SpreadSpace client = SpreadSpace(api_key=os.environ["SPREADSPACE_API_KEY"]) filings = client.registrants.filings("9900077", form="10-K") for filing in filings["data"]: print(filing["accession"], filing["filing_date"]) ``` ```csharp using SpreadSpace; using var client = new SpreadSpaceClient(Environment.GetEnvironmentVariable("SPREADSPACE_API_KEY")); var filings = await client.Registrants.FilingsAsync("9900077", form: "10-K"); foreach (var filing in filings.Data) Console.WriteLine($"{filing.Accession} {filing.FilingDate}"); ``` ```go package main import ( "fmt" "net/http" "io" ) func main() { url := "https://api.spreadspace.app/api/public/registrants/9900077/filings?form=10-K" req, _ := http.NewRequest("GET", url, nil) req.Header.Add("Authorization", "Bearer ") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby require 'uri' require 'net/http' url = URI("https://api.spreadspace.app/api/public/registrants/9900077/filings?form=10-K") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Get.new(url) request["Authorization"] = 'Bearer ' response = http.request(request) puts response.read_body ``` ```java import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.get("https://api.spreadspace.app/api/public/registrants/9900077/filings?form=10-K") .header("Authorization", "Bearer ") .asString(); ``` ```php request('GET', 'https://api.spreadspace.app/api/public/registrants/9900077/filings?form=10-K', [ 'headers' => [ 'Authorization' => 'Bearer ', ], ]); echo $response->getBody(); ``` ```swift import Foundation let headers = ["Authorization": "Bearer "] let request = NSMutableURLRequest(url: NSURL(string: "https://api.spreadspace.app/api/public/registrants/9900077/filings?form=10-K")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "GET" request.allHTTPHeaderFields = headers let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```