# `POST /v1/aml/screen` — Screen one person against sanctions and PEP lists

Uses the same lists and scoring as the AML workflow step. Send Idempotency-Key to reuse a saved response and billing ID on retries, scoped to organization and environment. Encrypted responses are replayable for 24 hours from the first attempt; expired keys return 410 and cannot charge again. Without the header, every request is independent. At most 120 calls per minute per organization, including replays. Raw subject input is not stored.

Parameters:
- `Idempotency-Key` (header, string): A unique identifier for this intended screening. Reuse on retries; printable non-space ASCII. Changed request details conflict. Generate a new key only for a new intended screening.

Body:
- `name` (string)
- `names` (array of string): Further spellings: aliases, maiden name.
- `date_of_birth` (string): YYYY-MM-DD.
- `nationality` (string): ISO alpha-3.
- `document_number` (string)
- `include_peps` (boolean)
- `reference` (string): Your id; echoed back and included in the encrypted saved response when Idempotency-Key is used.

Responses:
- 200: The screening.
- 400: Invalid input.
- 401: Missing, unknown or expired API key.
- 402: The balance does not cover the screening.
- 403: The key lacks the scope this call needs, or its IP allowlist refuses the caller.
- 409: The same key is in progress (idempotency_in_progress, Retry-After: 1), conflicts with different request details, or its reservation was refunded.
- 410: The saved-response window expired; this key cannot create another charge.
- 429: More than 120 screenings in a minute.
- 503: A source list or matching capacity/worker is unavailable. Capacity errors return Retry-After: 1. Retry with the same Idempotency-Key; no charge is started for rejected matching work.