Get a checklist

Load one Check List by id. The list must belong to the client on the JWT. An invalid ObjectId, a missing list, or a list owned by another client returns 404.

This call does not run lookups and does not spend credits. Use featureCodes on the document to call each catalog API yourself.

Endpoint

GET https://api.verifik.co/v2/check-lists/{id}

Returns the saved list: name, countries, domains, featureCodes, and status. Use those codes with the matching SmartCheck / catalog URLs. There is no execute-checklist action on this path.

Headers

Name	Value
Content-Type	application/json
Authorization	Bearer <token>

The token must be a client JWT. A token without clientId returns 403.

Parameters

Name	Type	Required	Description
id	string	Yes	Check List ObjectId from create or list.

Request

Node.js

const fetch = require("node-fetch");

async function run() {
    const id = "6aa224c87034a338385c28c0";
    const res = await fetch(`https://api.verifik.co/v2/check-lists/${id}`, {
        method: "GET",
        headers: {
            "Content-Type": "application/json",
            Authorization: `Bearer ${process.env.VERIFIK_TOKEN}`,
        },
    });
    console.log(await res.json());
}

run();

PHP

<?php
$id = "6aa224c87034a338385c28c0";
$ch = curl_init("https://api.verifik.co/v2/check-lists/" . $id);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    "Content-Type: application/json",
    "Authorization: Bearer " . getenv("VERIFIK_TOKEN")
]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
echo curl_exec($ch);

Python

import os, requests

check_list_id = "6aa224c87034a338385c28c0"
url = f"https://api.verifik.co/v2/check-lists/{check_list_id}"
headers = {
    "Content-Type": "application/json",
    "Authorization": f"Bearer {os.getenv('VERIFIK_TOKEN')}"
}
r = requests.get(url, headers=headers)
print(r.json())

Go

package main

import (
    "encoding/json"
    "fmt"
    "net/http"
    "os"
)

func main() {
    id := "6aa224c87034a338385c28c0"
    req, _ := http.NewRequest("GET", "https://api.verifik.co/v2/check-lists/"+id, nil)
    req.Header.Set("Content-Type", "application/json")
    req.Header.Set("Authorization", "Bearer "+os.Getenv("VERIFIK_TOKEN"))
    resp, _ := http.DefaultClient.Do(req)
    defer resp.Body.Close()
    var out map[string]interface{}
    json.NewDecoder(resp.Body).Decode(&out)
    fmt.Println(out)
}

Response

200

{
    "data": {
        "_id": "6aa224c87034a338385c28c0",
        "client": "507f1f77bcf86cd799439013",
        "name": "KYC Colombia",
        "countries": ["Colombia", "Chile"],
        "domains": ["people", "vehicles"],
        "featureCodes": ["co-cedula", "cl-rut"],
        "status": "draft",
        "createdAt": "2026-09-10T03:32:00.000Z",
        "updatedAt": "2026-09-10T03:33:00.000Z"
    }
}

403

{
    "message": "Client context required",
    "code": "Forbidden"
}

404

{
    "message": "check_list_not_found",
    "code": "check_list_not_found"
}

Notes

• Invalid ObjectIds and lists from other clients both return 404 (check_list_not_found).
• The response does not include a hosted resume URL or a batch URL. Check List only stores the mix.
• To change fields, use Update a checklist. To remove it, use Delete a checklist.
• Running a code from featureCodes is a normal catalog call and spends credits there. See SmartCheck.