Download the official CEP

GET https://api.veriko.mx/v1/validations/{id}/cep

Audience: public
Auth: API key
Permission: validations_cep:download

Downloads the official Banxico CEP (Comprobante Electrónico de Pago) for a validated transfer. Only available when banxico_status: 'valid' (equivalent to has_cep: true). Default format is XML; use ?format=pdf for the Banxico-signed PDF. To download the CEPs for a date range in a single ZIP (with CSV + XLSX manifests), use GET /v1/finance/ceps; the list of validations with CEP available comes from GET /v1/validations filtered by status=valid.

Parameters
Parameter	In	Type	Required	Description
`id` *	path	`string (uuid)`	required	Validation UUID.
`format`	query	`string`	optional	Certificate format: `xml` (default) or `pdf`. Default: `xml`

Request

cURLPython•JavaScript•PHP•

curl -X GET 'https://api.veriko.mx/v1/validations/{id}/cep' \
  -H 'Authorization: Bearer mxcep_••••'

Python example — coming soon.

JavaScript example — coming soon.

PHP example — coming soon.

**Response status codes** `GET /v1/validations/{id}/cep`
Status	Class	Description	Body
200	`2xx`	CEP certificate file. `Content-Type` is `application/xml` or `application/pdf` based on the requested format.	No body
400	`4xx`	Format outside the allowlist (`invalid_export_format`).	`ErrorResponse`
401	`4xx`	Authentication is required or the provided credentials are invalid.	`ErrorResponse`
403	`4xx`	Permisos insuficientes	`ErrorResponse`
404	`4xx`	Validation not found (`not_found`) or the CEP is not available for this validation (`cep_not_available`). The CEP is not emitted when `banxico_status` is not `valid`, or when the associated XML/PDF was not persisted.	`ErrorResponse`
422	`4xx`	Invalid UUID in path (`invalid_uuid`).	`ErrorResponse`

**Response headers** `200`
Header	Type	Description
`Content-Disposition`	`string`	Force download with filename `CEP-{validation_id}.{ext}`.

**Errors from `GET /v1/validations/{id}/cep`**
Status	Code	Detail
401	`unauthorized`	Invalid or missing authentication credentials. Envelope meta.request_id `c4d5e6f7a8b9`
403	`forbidden`	You do not have permission to access this resource. Envelope meta.request_id `d5e6f7a8b9c0`