A clean API for company lifecycle events

curl https://api.companyvisor.com/v1/events \
  -H "Authorization: Bearer $COMPANYVISOR_KEY" \
  -G \
  -d type=company.formed \
  -d state=TX,AZ \
  -d category=construction \
  -d name=roofing \
  -d since=2026-09-01

from companyvisor import Client

cv = Client(api_key="cv_live_...")

for event in cv.events.list(
    type="company.insolvency_filed",
    state=["NY", "NJ"],
    category="construction",
):
    print(event.company.name, event.insolvency.kind)

{
  "data": [
    {
      "id": "evt_01J8Z6Q4M2",
      "type": "company.formed",
      "company": {
        "id": "co_7Hn2kQ",
        "name": "Northwind Roofing LLC",
        "entity_type": "llc",
        "state": "TX",
        "city": "Austin"
      }
    }
  ],
  "next_cursor": "eyJpZCI6ImV2dF8wMUo4...",
  "has_more": true
}

import crypto from "node:crypto";

// header: CV-Signature: t=1727186531,v1=5f2b...
export function verify(rawBody, header, secret) {
  const { t, v1 } = Object.fromEntries(
    header.split(",").map((p) => p.split("="))
  );
  const expected = crypto
    .createHmac("sha256", secret)
    .update(`${t}.${rawBody}`)
    .digest("hex");

  const fresh = Math.abs(Date.now() / 1000 - Number(t)) < 300;
  return fresh && crypto.timingSafeEqual(
    Buffer.from(expected), Buffer.from(v1)
  );
}

import hmac, hashlib, time

def verify(raw_body: bytes, header: str, secret: str) -> bool:
    parts = dict(p.split("=", 1) for p in header.split(","))
    signed = f"{parts['t']}.".encode() + raw_body
    expected = hmac.new(secret.encode(), signed, hashlib.sha256).hexdigest()

    fresh = abs(time.time() - int(parts["t"])) < 300
    return fresh and hmac.compare_digest(expected, parts["v1"])