Returns access records associated with a given MPxN, registered by the authenticated Data User. Covers all legal bases and all lifecycle states unless filtered. Supports customer transparency — customers may request this list via any Controller to see who holds registered access to their meter point data.
JWT from GET /auth/token. Pass as Authorization: Bearer <token>. Expires after 7200s.
Meter Point Administration Number (MPAN) or Meter Point Reference Number (MPRN).
^(?:[0-9A-HJ-NPR-Z]{2}[0-9]{8,10}|[0-9]{10})$"1234567890123"
Filter by record lifecycle state. Omit to return all states. Lifecycle state of the access record.
ACTIVE — access is registered and in force.EXPIRED — the record's expiry has passed.REVOKED — the Controller has removed their registration, or the customer
has withdrawn consent. Retained for audit with access-event.revoked-at set.ACTIVE, EXPIRED, REVOKED Filter by legal basis. Omit to return all bases. The legal basis under which the Controller accesses customer data.
Consent bases — notice and access-event.consent must be populated.
| Value | Plain name | Article |
|---|---|---|
uk-consent | UK Consent | UK GDPR Art. 6(1)(a) |
uk-explicit-consent | UK Explicit Consent | UK GDPR Art. 9(2)(a) |
Non-consent bases — notice and access-event.consent must be null.
| Value | Plain name | Article | Supporting field |
|---|---|---|---|
uk-legitimate-interests | UK Legitimate Interests | UK GDPR Art. 6(1)(f) | processing.lia-reference |
uk-public-task | UK Public Task | UK GDPR Art. 6(1)(e) | processing.statutory-reference |
uk-legal-obligation | UK Legal Obligation | UK GDPR Art. 6(1)(c) | processing.statutory-reference |
uk-contract | UK Contract | UK GDPR Art. 6(1)(b) | — |
uk-consent, uk-explicit-consent, uk-legitimate-interests, uk-public-task, uk-legal-obligation, uk-contract "uk-consent"