> ## Documentation Index > Fetch the complete documentation index at: https://docs.lead.bank/llms.txt > Use this file to discover all available pages before exploring further. # List all Core Accounts ## OpenAPI ````yaml GET /v2/core_accounts openapi: 3.0.1 info: title: Lead Bank description: Lead Bank's APIs version: v1.0 servers: - url: https://api.sandbox.lead.bank - url: https://api.lead.bank security: - bearerAuth: [] tags: - name: ACH - name: Account Number - name: OAuth - name: Events - name: Instant Payments - name: Lending - name: Simulation - name: Internal Transfer - name: Disbursement - name: Entity - name: Wire - name: Originator - name: Funding - name: Balances - name: Compliance - name: UserAccount - name: Blockchain Payment - name: Core Account - name: Core Balance - name: Core Transaction - name: Event Subscription paths: /v2/core_accounts: get: tags: - Core Account summary: List all Core Accounts operationId: list-all-core-accounts parameters: - name: type in: query schema: $ref: '#/components/schemas/CoreAccountType' - name: limit in: query example: 10 schema: type: integer minimum: 1 maximum: 100 default: 10 - name: starting_after in: query example: core_account_xyz123 schema: type: string pattern: ^core_account_\w+$ - name: ending_before in: query example: core_account_xyz456 schema: type: string pattern: ^core_account_\w+$ responses: '200': description: A list of Core Account objects. content: application/json: schema: type: object required: - objects - has_more properties: objects: type: array items: $ref: '#/components/schemas/CoreAccount' has_more: type: boolean '400': description: The request could not be parsed (e.g. a malformed query string). content: application/json: schema: $ref: '#/components/schemas/Error' example: code: request_malformed message: The request is invalid and cannot be parsed by the server. errors: - code: url_malformed message: The query string could not be parsed. '401': description: >- No valid authentication was supplied. `code` is `authentication_missing` when no credentials are present and `token_invalid` when the bearer token is missing, expired, or malformed. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: authentication_missing message: No authentication credentials were provided. '403': description: The caller's source IP is not on Lead's allowlist. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: source_ip_not_allowed message: The client making the request is not on Lead's IP allowlist. '422': description: >- One or more query parameters failed validation. All failures are returned at once. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: parameters_invalid message: One or more parameters are invalid. errors: - code: not_in_allowed_set message: 'type must be one of: attributed, direct, shadow.' parameters: - type - code: out_of_range message: limit must be between 1 and 100. parameters: - limit '429': description: Rate limit exceeded. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: rate_limit_exceeded message: >- You have exceeded the rate limit for this endpoint. Retry after the limit resets. '500': description: Something went wrong on Lead's side. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: internal_server_error message: >- Something went wrong on our end. Contact Lead with the Request-Id if this persists. '503': description: >- The endpoint is temporarily disabled (e.g. a migration cutover). Retry after a delay. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: endpoint_disabled message: >- This endpoint is temporarily disabled. Retry after the indicated delay. '504': description: An upstream system (the core) timed out. Retry with backoff. content: application/json: schema: $ref: '#/components/schemas/Error' example: code: gateway_timeout message: An upstream system timed out. Retry with backoff. components: schemas: CoreAccountType: type: string example: attributed enum: - attributed - direct - shadow CoreAccount: type: object readOnly: true properties: id: $ref: '#/components/schemas/CoreAccountID' name: type: string example: Consumer FBO type: $ref: '#/components/schemas/CoreAccountType' status: $ref: '#/components/schemas/CoreAccountStatus' entities: $ref: '#/components/schemas/CoreAccountEntities' permissions: $ref: '#/components/schemas/CoreAccountPermissions' created_at: type: string format: date-time example: '2025-09-01T00:00:00Z' updated_at: type: string format: date-time example: '2026-03-21T12:00:00Z' Error: type: object required: - code - message properties: code: $ref: '#/components/schemas/ErrorCode' message: type: string description: >- A human-readable description of the error family. Identical for every occurrence of a given `code`; carries no request-specific detail. example: One or more parameters are invalid. errors: type: array description: >- Zero or more specific errors within this family. Always present for validation errors, one entry per failing field. items: $ref: '#/components/schemas/ErrorItem' CoreAccountID: type: string example: core_account_xyz123 pattern: ^core_account_\w+$ CoreAccountStatus: type: string example: active enum: - active - inactive - closed CoreAccountEntities: type: object properties: account_holder_type: $ref: '#/components/schemas/CoreAccountHolderType' account_holders: type: array items: $ref: '#/components/schemas/EntityID' maxItems: 1 authorized_users: type: array items: $ref: '#/components/schemas/EntityID' maxItems: 1 CoreAccountPermissions: type: object properties: allowed_actors: type: array items: $ref: '#/components/schemas/EntityID' ErrorCode: type: string description: >- A snake_case code identifying the error family — the stable, machine-readable value partners branch on, together with the HTTP status. example: parameters_invalid enum: - request_malformed - idempotency_key_missing - authentication_missing - token_invalid - source_ip_not_allowed - url_invalid - object_not_found - method_not_allowed - idempotency_key_in_use - idempotency_request_inconsistent - rate_limit_exceeded - internal_server_error - service_unavailable - endpoint_disabled - gateway_timeout - unclassified - parameters_invalid - related_object_invalid - related_object_not_ready - related_object_conflict - limit_exceeded - client_control_restricted - lead_control_restricted - object_state_conflict - object_modified_concurrently - operation_invalid ErrorItem: type: object required: - code - message properties: code: type: string description: A snake_case code naming the specific error or sub-category. example: required message: type: string description: >- A human-readable description of this specific error, with interpolated values where relevant. example: account_number_id is required. parameters: type: array description: >- The request fields this error implicates, in dot notation for nested fields. Present for validation errors. items: type: string example: - account_number_id CoreAccountHolderType: type: string example: lead enum: - lead - partner EntityID: type: string description: The ID of your entity. example: entity_xyz123 pattern: ^entity_[^\s]{1,33}$ securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: JWT ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.