> ## Documentation Index > Fetch the complete documentation index at: https://docs.lead.bank/llms.txt > Use this file to discover all available pages before exploring further. # Retrieve an Application > Retrieve an Application by its ID. Applications created on v0 are returned in this shape. ## OpenAPI ````yaml GET /v2/applications/{id} openapi: 3.0.1 info: title: Lead Bank description: Lead Bank's APIs version: v1.0 servers: - url: https://api.sandbox.lead.bank - url: https://api.lead.bank security: - bearerAuth: [] tags: - name: ACH - name: Account Number - name: OAuth - name: Events - name: Instant Payments - name: Lending - name: Simulation - name: Internal Transfer - name: Disbursement - name: Entity - name: Wire - name: Originator - name: Funding - name: Receivable Sale - name: Balances - name: Compliance - name: Application - name: User Account - name: Blockchain Payment - name: Core Account - name: Core Balance - name: Core Transaction - name: Event Subscription - name: Receivable - name: User Credit Transaction - name: Files paths: /v2/applications/{id}: get: tags: - Application summary: Retrieve an application description: >- Retrieve an Application by its ID. Applications created on v0 are returned in this shape. operationId: retrieve-an-application-v2 parameters: - name: id in: path required: true description: Application ID, prefixed `application_`. schema: $ref: '#/components/schemas/ApplicationID' responses: '200': description: An application object. content: application/json: schema: $ref: '#/components/schemas/ApplicationV2' '400': description: The request could not be parsed. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: request_malformed message: The request is invalid and cannot be parsed by the server. errors: - code: url_malformed message: The request URL could not be parsed. '403': description: >- `code` is one of: `authentication_missing` (the request has no credentials), `token_invalid` (the bearer token is missing, expired, or invalid, or does not grant `application/read` or `application/read_write`), `source_ip_not_allowed` (the request came from an IP address that is not on your program's allowlist). content: application/json: schema: $ref: '#/components/schemas/Error' example: code: token_invalid message: The bearer token is missing, expired, malformed, or invalid. '404': description: >- No application exists with this ID, or it is not visible to your program. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: object_not_found message: >- No object exists at the requested ID, or it is not visible to this caller. '422': description: >- Your program is not enabled for Applications v2 (`lead_control_restricted`; `errors[].code` is `feature_not_enabled`). content: application/json: schema: $ref: '#/components/schemas/Error' example: code: lead_control_restricted message: >- A Lead-configured control blocks this request. Contact Lead with the Lead-Request-ID. errors: - code: feature_not_enabled message: >- Applications v2 isn't enabled for your program. Contact Lead to enable it. '429': description: Rate limit exceeded. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: rate_limit_exceeded message: >- You have exceeded the rate limit for this endpoint. Retry with backoff. '500': description: Internal server error. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: internal_server_error message: >- Something went wrong on our end. Contact Lead with the Request-Id if this persists. '503': description: >- The service or endpoint is temporarily unavailable. Retry after a delay. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: service_unavailable message: >- The service is temporarily unavailable. Retry after the indicated delay. '504': description: An upstream system did not respond in time. Retry with backoff. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: gateway_timeout message: An upstream system timed out. Retry with backoff. components: schemas: ApplicationID: type: string description: Unique identifier for the application. Prefixed with `application_`. example: application_xyz123 pattern: ^application_\w+$ ApplicationV2: type: object description: >- An application, your report of an underwriting decision. Applications created on v0 are returned in this shape. properties: id: $ref: '#/components/schemas/ApplicationID' client_application_id: type: string readOnly: true description: >- Your ID for applications you reported in an Application file. Lead omits it for applications created through the API. example: APP-2024-001 status: $ref: '#/components/schemas/ApplicationStatusV2' product_name: type: string description: Your internal product name. example: Growth Business Credit Line entities: $ref: '#/components/schemas/ApplicationEntitiesV2' details: $ref: '#/components/schemas/ApplicationDetailsV2' decision: $ref: '#/components/schemas/ApplicationDecisionV2' documents: type: array description: >- Compliance documents linked on v2, each referencing an uploaded file. Always an array. items: $ref: '#/components/schemas/FileDocument' legacy_documents: type: array readOnly: true description: >- Document entries created on v0 Applications, returned exactly as sent. Read only: ignored if included on a POST or PATCH. items: $ref: '#/components/schemas/LegacyApplicationDocumentV2' metadata: type: object description: Key-value pairs for your own use. additionalProperties: type: string created_at: type: string format: date-time description: When the application was created. RFC 3339, UTC. example: '2026-05-14T15:59:30Z' updated_at: type: string format: date-time description: When the application was last updated. RFC 3339, UTC. example: '2026-05-14T15:59:30Z' required: - id - status - product_name - entities - details - documents - created_at - updated_at Error: type: object required: - code - message properties: code: $ref: '#/components/schemas/ErrorCode' message: type: string description: >- A human-readable description of the error family. Identical for every occurrence of a given `code`; carries no request-specific detail. example: One or more parameters are invalid. errors: type: array description: >- Zero or more specific errors within this family. Always present for validation errors, one entry per failing field. items: $ref: '#/components/schemas/ErrorItem' ApplicationStatusV2: type: string description: >- The application's status. Applications created through the API are always `approved`, `declined`, or `canceled`, the statuses `POST` accepts. `submitted` and `under_review` appear only on applications you reported in an Application file before a decision was made. They are read only: `POST` does not accept them, and a `PATCH` that includes `status` leaves it unchanged. enum: - approved - declined - canceled - submitted - under_review example: approved ApplicationEntitiesV2: type: object description: >- The entities on the application. Authorized users are not returned here; list them with `GET /v2/applications/{id}/entity_relationships`. properties: account_holder_type: type: string description: >- Derived by Lead. `consumer` if every account holder is an individual, `commercial` if every account holder is a business or sole proprietorship. enum: - consumer - commercial example: commercial account_holders: type: array description: Entity IDs of the applicants. items: $ref: '#/components/schemas/EntityID' authorized_signers: type: array description: Entity IDs of authorized signers. items: $ref: '#/components/schemas/EntityID' ApplicationDetailsV2: type: object description: Underwriting and adverse action notice details. properties: underwriting: $ref: '#/components/schemas/ApplicationUnderwritingV2' adverse_action_notice: $ref: '#/components/schemas/ApplicationAdverseActionNoticeV2' ApplicationDecisionV2: type: object description: >- When and why the underwriting decision was made. Absent when `status` is `submitted` or `under_review`. properties: decided_at: type: string format: date-time description: When you made the underwriting decision. reason: type: string description: The reason for the decision. exception_approval_reason: type: string description: >- The reason for approving outside your standard underwriting process. Present only when you sent it. FileDocument: type: object description: >- A document entry in a v2 Application or User Account `documents` array: a reference to an uploaded file plus the moment the end user saw or agreed to it. The file's `type` is not repeated here; retrieve it via `GET /v2/files/{id}`. Entity document entries have their own shape and are specified with the v2 Entity operations. required: - file_id - timestamp properties: file_id: $ref: '#/components/schemas/FileID' timestamp: type: string format: date-time description: |- When the end-user was shown or agreed to the document, per the file type. Partner-supplied; records an exchange between the partner and end-user, never upload time. ISO 8601, UTC. example: '2026-09-14T14:20:11Z' version: type: string description: >- Partner-supplied label used for static documents so that two entries of the same type on one object can be ordered (e.g. terms of use v1 and v2). example: v2 LegacyApplicationDocumentV2: type: object description: >- A document entry sent through the v0 Applications API, returned exactly as sent. Read only. properties: document_id: type: string description: >- The SFTP filename sent on v0 as the document reference. Lead did not check that the file arrived. example: loan_agreement_01_2026.pdf type: $ref: '#/components/schemas/ComplianceDocumentType' displayed_at: type: string format: date-time description: >- When the document was shown to the applicant, as sent on v0. Present on disclosure documents. consented_at: type: string format: date-time description: >- When the applicant consented to the document, as sent on v0. Present on consent documents. version: type: string description: The version label sent on v0. example: v1 ErrorCode: type: string description: >- A snake_case code identifying the error family — the stable, machine-readable value partners branch on, together with the HTTP status. example: parameters_invalid enum: - request_malformed - content_too_large - idempotency_key_missing - authentication_missing - token_invalid - source_ip_not_allowed - url_invalid - object_not_found - method_not_allowed - idempotency_key_in_use - idempotency_request_inconsistent - rate_limit_exceeded - internal_server_error - service_unavailable - endpoint_disabled - gateway_timeout - unclassified - parameters_invalid - related_object_invalid - related_object_not_ready - related_object_conflict - limit_exceeded - client_control_restricted - lead_control_restricted - object_state_conflict - object_modified_concurrently - operation_invalid ErrorItem: type: object required: - code - message properties: code: type: string description: A snake_case code naming the specific error or sub-category. example: required message: type: string description: >- A human-readable description of this specific error, with interpolated values where relevant. example: account_number_id is required. parameters: type: array description: >- The request fields this error implicates, in dot notation for nested fields. Present for validation errors. items: type: string example: - account_number_id EntityID: type: string description: The ID of your entity. example: entity_xyz123 pattern: ^entity_[^\s]{1,33}$ ApplicationUnderwritingV2: type: object description: Underwriting inputs and outcomes. properties: is_secured: type: boolean description: '`true` if collateral secures the product.' is_mla: type: boolean description: '`true` if the applicant is covered by the Military Lending Act.' currency_code: $ref: '#/components/schemas/ComplianceCurrencyCode' underwriting_grade: type: string description: Your internal underwriting grade. example: A2 limit: type: integer description: The credit limit assigned, in minor units. example: 5000000 max_limit: type: integer description: >- The highest limit the applicant was approved for in original underwriting, in minor units. example: 10000000 report: $ref: '#/components/schemas/ApplicationCreditReportV2' ApplicationAdverseActionNoticeV2: type: object description: >- The adverse action notice you sent the applicant. Present on `declined` applications. properties: delivered_at: type: string format: date-time description: When you sent the notice to the applicant. reason: type: string description: The reason stated in the notice. delivery_method: type: string description: How you delivered the notice. enum: - email - text - other FileID: type: string description: Lead-issued identifier of the file, from `POST /v2/files`. example: file_7RwQ2mK9pL4xT1vN8jS5 pattern: ^file_\w+$ ComplianceDocumentType: type: string description: Type of document associated with an application enum: - aan - loan_agreement - loc_agreement - truth_in_lending_document - ach_authorization - notice_of_incompleteness - credit_score_notice - offer_summary - personal_guarantee - consumer_credit_auth - partner_privacy_policy - lead_privacy_policy - terms_of_use - esign_agreement - credit_pull_consent - fcra_notice - tcpa_consent - patriot_act_notice - mla_notice - pre_approval_terms - eft_authorization - prohibited_industry_certification - decision_maker_document - bo_certification - missed_payments_policy - consent_to_link_account - consent_to_link_hsa - negative_option_consent - lead_funds_transfer_agreement - deposit_agreement - cardholder_agreement - periodic_statement - autopay_authorization ComplianceCurrencyCode: type: string description: A three-letter currency code as defined in ISO 4217 enum: - AED - AFN - ALL - AMD - AOA - ARS - AUD - AWG - AZN - BAM - BBD - BDT - BGN - BHD - BIF - BMD - BND - BOB - BRL - BSD - BTN - BWP - BYN - BZD - CAD - CDF - CHF - CLP - CNH - CNY - COP - CRC - CUC - CUP - CVE - CZK - DJF - DKK - DOP - DZD - EGP - ERN - ETB - EUR - FJD - FKP - GBP - GEL - GGP - GHS - GIP - GMD - GNF - GTQ - GYD - HKD - HNL - HTG - HUF - IDR - ILS - IMP - INR - IQD - IRR - ISK - JEP - JMD - JOD - JPY - KES - KGS - KHR - KMF - KPW - KRW - KWD - KYD - KZT - LAK - LBP - LKR - LRD - LSL - LYD - MAD - MDL - MGA - MKD - MMK - MNT - MOP - MRU - MUR - MVR - MWK - MXN - MYR - MZN - NAD - NGN - NIO - NOK - NPR - NZD - OMR - PAB - PEN - PGK - PHP - PKR - PLN - PYG - QAR - RON - RSD - RUB - RWF - SAR - SBD - SCR - SDG - SEK - SGD - SHP - SLE - SOS - SRD - SSP - STD - STN - SVC - SYP - SZL - THB - TJS - TMT - TND - TOP - TRY - TTD - TWD - TZS - UAH - UGX - USD - UYU - UYW - UZS - VES - VND - VUV - WST - XAF - XCD - XCG - XMW - XOF - XPF - YER - ZAR - ZMW - ZWG ApplicationCreditReportV2: type: object description: >- Credit bureau data, when you sent it. Exactly one of `score` or `non_score_value` is present. properties: score: type: integer description: The bureau score, from 300 to 850. non_score_value: type: string description: Present when the bureau returned no numeric score. enum: - unestablished - frozen pulled_at: type: string format: date-time description: When you pulled the report. source: type: string description: The credit bureau. enum: - equifax - experian - transunion securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: JWT ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.