Retrieve a Plaid CRA (Consumer Reporting Agency) Base Report and handle FCRA adverse action requirements

In-depth guide

Steps

1. Create a Link token with products=["cra_base_report"] and a cra_options object specifying days_requested (up to 730) and optionally consumer_report_permissible_purpose
2. Complete the Plaid Link flow so the user authenticates and grants permissioned access; receive the public_token and exchange it for an access_token
3. Call /cra/base_report/get with the access_token to retrieve the BaseReport; poll until report_status is READY (the report is generated asynchronously)
4. Parse the report object: inspect accounts[].transactions for cash-flow signals, accounts[].owners for identity, and the report-level attributes (NSF counts, average daily balance, negative day counts)
5. Apply your credit decision logic; if you deny or apply adverse terms, you are a user of a consumer report under FCRA and must send an adverse action notice including the CRA name (Plaid), a statement of rights, and the specific reasons for adverse action
6. If the applicant disputes the report, direct them to Plaid's consumer dispute process — you cannot adjudicate data accuracy disputes yourself