My policy disclosure

GET 
/client-portal/me/policies/:policyId/disclosure

GET /client-portal/me/policies/{policyId}/disclosure

Requires a client portal session token issued by POST /client-portal/otp/verify. Pass it as Authorization: Bearer <sessionToken>. This is not a platform JWT — the platform-JWT guard is disabled on this route and the handler validates the session token itself.

Request

Responses

200

404

The referenced resource does not exist or is not visible to the caller. Note: object-level scoping is opaque — a resource you cannot see is indistinguishable from a resource that does not exist.

429

Rate limit exceeded. Global default is 120 requests/minute per IP; auth-flow, OTP, self-registration, WebAuthn, IRA lookup, and public-lead endpoints carry tighter per-endpoint limits. Retry after the delay indicated by the Retry-After header.

Response Headers

Retry-After

Seconds to wait before retrying.

500

Unhandled server error. The response carries a meta.requestId correlator you can hand to platform operations to trace the failure through structured logs and the hash-chained audit trail. Retry with the same Idempotency-Key header if the endpoint accepts idempotency.