Skip to main content

Overview

By 08:30 GMT on Monday 23 November 2026, the links that the V1 API returns for downloading documents change to a new format:
  • The host changes from download.kyckr.com to document.kyckr.com.
  • Each link carries an expires parameter and a token parameter.
  • Each link is valid for 30 days from the time Kyckr issues it.
The new format applies to PDF documents and to structured JSON documents.
Action required: make sure that your integration can process the new URL before 08:30 GMT on Monday 23 November 2026. Links in the old download.kyckr.com format stop working on 23 December 2026.
Before:
After:
Before:
After:

The new query parameters

A download request returns HTTP 403 Forbidden, not the document, when:
  • the link is past its expires time
  • the link was changed, for example a parameter was edited or removed
  • the link is in the old download.kyckr.com format, from 23 December 2026

What you need to do

  1. Use the link exactly as the API returns it. Do not build download links yourself from a file ID. Do not change, decode, re-encode or remove the query string.
  2. Send no extra headers. The download request needs no Authorization header, cookie or other credential. The signed link is enough.
  3. Download and store documents within 30 days. A link stops working 30 days after it is issued, and Kyckr does not issue a new link for the same document. If you need a document after that time, download and store the file before the link expires.
  4. Allow the new host. If your network restricts outbound traffic to a list of known hosts, add document.kyckr.com before 08:30 GMT on Monday 23 November 2026.
  5. Download documents from stored old-format links before 23 December 2026. Links in the download.kyckr.com format stop working on that date and return 403. Kyckr does not issue new links for them.
Download links are returned in the same fields as today. Only the format of the link value changes. No field is added, removed or renamed.

Example: order status response

A completed order returns both links in the new format:

Example: download request

Send a plain GET request to the link as returned. Do not add an Authorization header:

Additional resources