Fetch CRIF Credit Report PDF

Endpoint Overview

POST /api/v1/credit-report-crif/fetch-report-pdf

Description

The Fetch CRIF Credit Report PDF API enables you to retrieve an individual's credit report from CRIF in both PDF and JSON formats. By providing essential KYC details such as name, mobile number, and PAN, along with user consent, this API returns the credit score, a downloadable PDF link, and the structured credit report data. This endpoint is designed for seamless integration into digital onboarding, lending, and verification workflows, ensuring fast, secure, and reliable access to credit information.

Key Benefits

Instantly fetches official CRIF credit reports in both PDF and JSON formats.

Simplifies digital KYC and creditworthiness assessment processes.

Secure, consent-driven access ensures compliance with regulatory standards.

Reduces manual intervention and accelerates customer onboarding.

Use Cases

Banking & Lending

Fintech & NBFCs

Employment & Tenant Screening

Automate loan eligibility checks during digital loan applications.

Integrate credit report retrieval into customer onboarding for credit cards.

Technical Implementation

Authentication

All API requests require authentication using a JWT Bearer token. Authentication follows these steps:

Obtain API Credentials: Register with Surepass to receive your API key.

Generate JWT Token: Use your API key to generate a JWT token.

Include in Requests: Add the token to the Authorization header as Bearer TOKEN.

Different authentication tokens are used for sandbox and production environments:

Sandbox: https://sandbox.surepass.app

Production: https://kyc-api.surepass.app

Request Parameters

Request Headers

Header	Required	Description
Authorization	Yes	Bearer token in the format `Bearer <JWT>`
Content-Type	Yes	Must be `application/json`

Request Body

Parameter	Type	Required	Description
first_name	string	Yes	First name of the individual
last_name	string	Yes	Last name of the individual
mobile	string	Yes	Mobile number of the individual
pan	string	Yes	PAN number of the individual
consent	string	Yes	User consent flag (`Y` for Yes, `N` for No)
raw	boolean	Yes	If `true`, returns raw JSON; if `false`, returns processed report and PDF

Example Request

{
  "first_name": "Rahul",
  "last_name": "Sharma",
  "mobile": "9876543210",
  "pan": "AXYPR5678L",
  "consent": "Y",
  "raw": false
}

Process Response

Response Parameters

Parameter	Type	Description
data	object	Contains the credit report details
client_id	string	Unique identifier for the credit report request
first_name	string	First name of the individual
last_name	string	Last name of the individual
mobile	string	Mobile number of the individual
pan	string	PAN number of the individual
credit_score	string	Credit score as per CRIF
credit_report	object	JSON representation of the credit report
credit_report_link	string	Temporary URL to download the PDF credit report
status_code	number	HTTP status code (e.g., 200 for success)
success	boolean	Indicates if the request was successful
message	string	Response message
message_code	string	Response message code

Example Successful Response

{
  "data": {
    "client_id": "credit_report_crif_pdf_QuSYiwhmGFqfwuegPVqj",
    "first_name": "Rahul",
    "last_name": "Sharma",
    "mobile": "9876543210",
    "pan": "AXYPR5678L",
    "credit_score": "734",
    "credit_report": {},
    "credit_report_link": "https://temp-surepass-bucket.s3.amazonaws.com/ritik.singh/credit_report_crif/credit_report_crif_pdf_QuSYiwhmGFqfwuegPVqj/credit_report_1753363033811150.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY5K3QRM5JDBTSGYP%2F20250724%2Fap-south-1%2Fs3%2Faws4_request&X-Amz-Date=20250724T131714Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=3ffacd2813c59d19c77789b009837b64e182136a51fe8600de1df172f838bbae"
  },
  "status_code": 200,
  "success": true,
  "message": "Success",
  "message_code": "success"
}

Possible Error Responses

Invalid Input

Unauthorized

{
  "status_code": 400,
  "success": false,
  "message": "Invalid PAN format",
  "message_code": "invalid_pan"
}

The provided PAN number is invalid or incorrectly formatted.

Integration Best Practices

Security Recommendations

Always transmit the JWT bearer token over HTTPS to prevent interception.

Never log or expose sensitive user data such as PAN or credit report links.

User Experience Guidelines

Clearly inform users and obtain explicit consent before fetching their credit report.

Display credit scores and report summaries in a user-friendly, non-technical format.

Code Samples

cURL

Python

Node.js

Related APIs

Fetch CRIF Credit Report JSON: Retrieve only the JSON version of the CRIF credit report.

Fetch Experian Credit Report PDF: Obtain Experian credit reports in PDF and JSON formats.

Fetch CIBIL Credit Report: Access CIBIL credit scores and reports for KYC and lending.

Compliance and Legal Considerations

Ensure explicit user consent is obtained before fetching credit reports.

Use the API strictly for permissible purposes as per regulatory guidelines.

Store and handle credit report data in compliance with data protection laws (e.g., IT Act, RBI guidelines).

curl --location --request POST 'https://kyc-api.surepass.app/api/v1/credit-report-crif/fetch-report-pdf' \ --header 'Content-Type: application/json' \ --data-raw '{ "first_name": "Rahul", "last_name": "Sharma", "mobile": "9876543210", "pan": "AXYPR5678L", "consent": "Y", "raw": false }'

{ "data": { "client_id": "credit_report_crif_pdf_QuSYiwhmGFqfwuegPVqj", "first_name": "Rahul", "last_name": "Sharma", "mobile": "9876543210", "pan": "AXYPR5678L", "credit_score": "734", "credit_report": {}, "credit_report_link": "https://temp-surepass-bucket.s3.amazonaws.com/ritik.singh/credit_report_crif/credit_report_crif_pdf_QuSYiwhmGFqfwuegPVqj/credit_report_1753363033811150.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY5K3QRM5JDBTSGYP%2F20250724%2Fap-south-1%2Fs3%2Faws4_request&X-Amz-Date=20250724T131714Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=3ffacd2813c59d19c77789b009837b64e182136a51fe8600de1df172f838bbae" }, "status_code": 200, "success": true, "message": "Success", "message_code": "success" }

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Credit Report Crif PDF

Fetch CRIF Credit Report PDF#

Description#

Use Cases#

Technical Implementation#

Request Headers#

Request Body#

Example Request#

Response Parameters#

Example Successful Response#

Possible Error Responses#

Integration Best Practices#

Code Samples#

Request

Responses