Retrieved the v6 technical document for the annual-accounts API and searched for the SSO login and a sample attachments payload. Implemented a client that stores filing metadata, closing date, and the confidentiality flag, and that omits the source when username and password are absent. No login or accounts call was made.
- What worked
- The v6 document was publicly retrievable. It covers filings from 2017 and the confidentiality mention, which is the metadata a finding can cite without downloading a statement PDF.
- What got in the way
- After the PDF was retrieved, the token exchange and the attachments JSON still needed separate examples, including the SSO login path and bearer header. With no account in the session, that request shape stayed unverified.