> ## Documentation Index > Fetch the complete documentation index at: https://docs.codaclean.io/llms.txt > Use this file to discover all available pages before exploring further. # CODA-bestanden oplijsten > Processed CODA files, grouped by customer, then by IBAN, currency and year. Each file comes with a pre-signed download URL, valid for 30 minutes. Files already acknowledged with this API key and user are hidden, unless `redownload` is `true`. The list is not paginated. Only files of customers the user can access are included. Files arrive in the morning: polling twice a day is enough. Always send a JSON body, at least `{}`. **Required scope:** `files:read` ## OpenAPI ````yaml POST /coda-files openapi: 3.1.0 info: title: Codaclean API version: '1.0' description: > The Codaclean external API lets partner software (accounting tools, practice management software, sync agents) integrate with Codaclean on behalf of an accounting firm: manage its customers, request CODA and CODB mandates, and retrieve the CODA and CODB files Codaclean receives for them. servers: - url: https://api.codaclean.io/v1 description: Production - url: https://api.test.codaclean.io/v1 description: Staging security: - apiKeyAuth: [] bearerAuth: [] tags: - name: Authentication description: Obtain and refresh the ID token sent with every other call. - name: Utilities description: Connectivity check. - name: Customers description: The customers (client companies) managed by the accounting firm. - name: Bank accounts description: Bank accounts (IBANs) linked to a customer. - name: Customer payroll providers description: Payroll providers (social secretariats) linked to a customer. - name: Mandates description: CODA mandates (per bank account) and CODB mandates (per payroll provider). - name: Reference data description: Banks and payroll providers known to Codaclean. - name: CODA files description: Bank statement files in CODA format. - name: CODB files description: Payroll files in CODB format, delivered by payroll providers. paths: /coda-files: post: tags: - CODA files summary: List CODA files description: > Processed CODA files, grouped by customer, then by IBAN, currency and year. Each file comes with a pre-signed download URL, valid for 30 minutes. Files already acknowledged with this API key and user are hidden, unless `redownload` is `true`. The list is not paginated. Only files of customers the user can access are included. Files arrive in the morning: polling twice a day is enough. Always send a JSON body, at least `{}`. **Required scope:** `files:read` operationId: listCodaFiles requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/CodaFilesSearch' examples: all: summary: All files, acknowledged included value: redownload: true withPdf: summary: With PDF value: redownload: true includePdf: true responses: '200': description: Matching files, grouped by customer. content: application/json: schema: type: array items: $ref: '#/components/schemas/CodaFilesCustomer' examples: all: summary: Files value: - id: 675b4183d350b74dad2f46ec name: Boulangerie Dupont SRL accountingRef: DUPONT enterpriseNumber: 0764.042.472 isConfidential: false ibans: - iban: BE49001163522171 currency: EUR year: 2022 files: - id: 675b42981fbd2b49ba0c2c1a fileName: 039_CODA_20220314_BE49001163522171_EUR.cod statementDate: '2022-03-14T00:00:00.000Z' statementNumber: '039' processedOn: '2024-12-12T20:08:13.466Z' urls: coda: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/DUPONT/2022/BE49001163522171/039_CODA_20220314_BE49001163522171_EUR.cod?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427808&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN&response-content-disposition=attachment%3B+filename%3D%22039_CODA_20220314_BE49001163522171_EUR.cod%22 - id: 675b429a62c7a588e3e68af7 fileName: 040_CODA_20220316_BE49001163522171_EUR.cod statementDate: '2022-03-16T00:00:00.000Z' statementNumber: '040' processedOn: '2024-12-12T20:08:15.545Z' urls: coda: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/DUPONT/2022/BE49001163522171/040_CODA_20220316_BE49001163522171_EUR.cod?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427808&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN&response-content-disposition=attachment%3B+filename%3D%22040_CODA_20220316_BE49001163522171_EUR.cod%22 - id: 675b41d6d350b74dad2f46ed name: Garage Peeters BV accountingRef: PEETERS enterpriseNumber: 0755.556.457 isConfidential: false ibans: - iban: BE59732578835326 currency: EUR year: 2022 files: - id: 675b42986328595712f5b7c0 fileName: 073_CODA_20220329_BE59732578835326_EUR.cod statementDate: '2022-03-29T00:00:00.000Z' statementNumber: '073' processedOn: '2024-12-12T20:08:13.605Z' urls: coda: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/PEETERS/2022/BE59732578835326/073_CODA_20220329_BE59732578835326_EUR.cod?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427808&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN&response-content-disposition=attachment%3B+filename%3D%22073_CODA_20220329_BE59732578835326_EUR.cod%22 - id: 675b42b174428167bf2b4210 fileName: 074_CODA_20220330_BE59732578835326_EUR.cod statementDate: '2022-03-30T00:00:00.000Z' statementNumber: '074' processedOn: '2024-12-12T20:08:21.123Z' urls: coda: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/PEETERS/2022/BE59732578835326/074_CODA_20220330_BE59732578835326_EUR.cod?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427808&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN&response-content-disposition=attachment%3B+filename%3D%22074_CODA_20220330_BE59732578835326_EUR.cod%22 withPdf: summary: Files with PDF value: - id: 675b4183d350b74dad2f46ec name: Boulangerie Dupont SRL accountingRef: DUPONT enterpriseNumber: 0764.042.472 isConfidential: false ibans: - iban: BE49001163522171 currency: EUR year: 2022 files: - id: 675b42981fbd2b49ba0c2c1a fileName: 039_CODA_20220314_BE49001163522171_EUR.cod statementDate: '2022-03-14T00:00:00.000Z' statementNumber: '039' processedOn: '2024-12-12T20:08:13.466Z' urls: coda: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/DUPONT/2022/BE49001163522171/039_CODA_20220314_BE49001163522171_EUR.cod?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427809&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN&response-content-disposition=attachment%3B+filename%3D%22039_CODA_20220314_BE49001163522171_EUR.cod%22 pdf: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/DUPONT/2022/BE49001163522171/PDF/039_CODA_20220314_BE49001163522171_EUR.pdf?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427809&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN - id: 675b429a62c7a588e3e68af7 fileName: 040_CODA_20220316_BE49001163522171_EUR.cod statementDate: '2022-03-16T00:00:00.000Z' statementNumber: '040' processedOn: '2024-12-12T20:08:15.545Z' urls: coda: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/DUPONT/2022/BE49001163522171/040_CODA_20220316_BE49001163522171_EUR.cod?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427809&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN&response-content-disposition=attachment%3B+filename%3D%22040_CODA_20220316_BE49001163522171_EUR.cod%22 pdf: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/DUPONT/2022/BE49001163522171/PDF/040_CODA_20220316_BE49001163522171_EUR.pdf?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427809&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN - id: 675b41d6d350b74dad2f46ed name: Garage Peeters BV accountingRef: PEETERS enterpriseNumber: 0755.556.457 isConfidential: false ibans: - iban: BE59732578835326 currency: EUR year: 2022 files: - id: 675b42986328595712f5b7c0 fileName: 073_CODA_20220329_BE59732578835326_EUR.cod statementDate: '2022-03-29T00:00:00.000Z' statementNumber: '073' processedOn: '2024-12-12T20:08:13.605Z' urls: coda: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/PEETERS/2022/BE59732578835326/073_CODA_20220329_BE59732578835326_EUR.cod?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427809&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN&response-content-disposition=attachment%3B+filename%3D%22073_CODA_20220329_BE59732578835326_EUR.cod%22 pdf: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/PEETERS/2022/BE59732578835326/PDF/073_CODA_20220329_BE59732578835326_EUR.pdf?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427809&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN - id: 675b42b174428167bf2b4210 fileName: 074_CODA_20220330_BE59732578835326_EUR.cod statementDate: '2022-03-30T00:00:00.000Z' statementNumber: '074' processedOn: '2024-12-12T20:08:21.123Z' urls: coda: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/PEETERS/2022/BE59732578835326/074_CODA_20220330_BE59732578835326_EUR.cod?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427809&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN&response-content-disposition=attachment%3B+filename%3D%22074_CODA_20220330_BE59732578835326_EUR.cod%22 pdf: >- https://codaclean-files.s3.eu-west-1.amazonaws.com/3f1c2a9e-7b4d-4e8a-9c21-5d6e7f8a9b0c/PEETERS/2022/BE59732578835326/PDF/074_CODA_20220330_BE59732578835326_EUR.pdf?AWSAccessKeyId=ASIAIOSFODNN7EXAMPLE&Expires=1790427809&Signature=EXAMPLE_SIGNATURE&x-amz-security-token=IQoJb3JpZ2luX2VjEXAMPLE_SESSION_TOKEN '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '429': $ref: '#/components/responses/TooManyRequests' '500': $ref: '#/components/responses/InternalError' components: schemas: CodaFilesSearch: type: object properties: redownload: type: boolean default: false description: > By default, files already acknowledged with this API key and user are hidden. Set to `true` to list them again. customer: type: string description: Customer name. enterpriseNumber: type: string description: Belgian enterprise number, formatted `0123.456.789`. iban: type: string currency: type: string statementDate: type: object description: Statement date range (inclusive). properties: from: type: string format: date to: type: string format: date processingDate: type: object description: Range (inclusive) on the date Codaclean processed the file. properties: from: type: string format: date-time to: type: string format: date-time statementNumber: type: object description: Statement number range (inclusive). properties: from: type: string to: type: string includePdf: type: boolean default: false description: Also return a download URL for the PDF version of each file. CodaFilesCustomer: type: object properties: id: type: string description: Customer identifier. name: type: string accountingRef: type: string enterpriseNumber: type: string description: Belgian enterprise number, formatted `0123.456.789`. isConfidential: type: boolean ibans: type: array description: One entry per IBAN, currency and statement year. items: type: object properties: iban: type: string currency: type: string year: type: integer files: type: array items: $ref: '#/components/schemas/CodaFile' CodaFile: type: object properties: id: type: string description: Use it to acknowledge the download. fileName: type: string statementDate: type: string format: date-time statementNumber: type: string processedOn: type: string format: date-time urls: type: object description: Pre-signed download URLs, valid for 30 minutes. properties: coda: type: string format: uri pdf: type: string format: uri description: Present when `includePdf` is `true`. Message: type: object description: Confirmation returned by actions that do not return a resource. required: - message properties: message: type: string Error: type: object description: > Error body. `code` is a stable, machine-readable token; it is present on errors returned by the customers, mandates and reference-data endpoints. Some errors carry extra keys, such as `fields` or `candidates`. required: - message properties: message: type: string description: Human-readable description. Do not parse it. code: type: string description: | Machine-readable error code. **See also:** [Errors](/api/errors#error-codes) fields: type: array items: type: string description: >- Offending fields. Present with `unknownField` and `fieldNotUpdatable`. candidates: type: array description: Present with `connectorSelectionRequired`. items: $ref: '#/components/schemas/ConnectorCandidate' ConnectorCandidate: type: object properties: connectorId: type: integer name: type: string bicCode: type: string available: type: boolean responses: Unauthorized: description: >- Missing, invalid or expired ID token, or user not allowed to use the API. content: application/json: schema: $ref: '#/components/schemas/Message' examples: noToken: summary: No ID token value: message: Unauthorized invalidToken: summary: Invalid or expired ID token value: message: Unauthorized Forbidden: description: >- Missing or invalid API key, missing scope (`forbiddenScope`), or access denied. content: application/json: schema: $ref: '#/components/schemas/Error' examples: noApiKey: summary: No API key value: message: Forbidden invalidApiKey: summary: Invalid API key value: message: Forbidden TooManyRequests: description: Rate limit or quota exceeded for this API key. content: application/json: schema: $ref: '#/components/schemas/Message' examples: tooManyRequests: summary: Rate limit exceeded value: message: Too Many Requests InternalError: description: Unexpected server error. content: application/json: schema: $ref: '#/components/schemas/Error' examples: internalError: summary: Unexpected server error value: message: Internal server error securitySchemes: apiKeyAuth: type: apiKey in: header name: x-api-key description: >- Identifies the partner software. Issued by Codaclean. Required on every call, including `POST /token`. bearerAuth: type: http scheme: bearer bearerFormat: JWT (Cognito ID token) description: >- Identifies the user and their accounting firm. Send the `idToken` returned by `POST /token` as `Authorization: Bearer `. Valid for 1 hour. ````