# Get Filter Options

> The filter keys and allowed values for Lead Finder searches.

Requires an API key with the `read` scope.

Call this before searching. It lists every valid filter key with a one-line meaning, plus the closed vocabularies for industries and company types. It does not check your plan or spend anything.

## Response

<ResponseField name="data" type="object">
  Filter vocabularies.

  <Expandable title="data">
    <ResponseField name="industries" type="array">Industry names the provider matches.</ResponseField>
    <ResponseField name="companyTypes" type="array">Company types, for example `Privately Held`.</ResponseField>
    <ResponseField name="headcountGrowthTimespans" type="array">Values for `headcountGrowthTimespan` on company searches.</ResponseField>
    <ResponseField name="allowedCountries" type="array">Alpha-2 codes searches may target. Empty means anywhere that is not blocked.</ResponseField>
    <ResponseField name="blockedCountries" type="array">Alpha-2 codes that are never shown.</ResponseField>
    <ResponseField name="coverage" type="string">Where results come from, in words.</ResponseField>
    <ResponseField name="personFilterKeys" type="object">Every valid people-filter key mapped to what it does.</ResponseField>
    <ResponseField name="companyFilterKeys" type="object">Every valid company-filter key mapped to what it does.</ResponseField>
  </Expandable>
</ResponseField>

<RequestExample>
```bash cURL
curl -X GET "https://api.foxreach.io/api/v1/lead-finder/filter-options" \
  -H "X-API-Key: otr_your_key"
```

```python Python SDK (beta)
from foxreach import FoxReach

client = FoxReach(api_key="otr_your_key")
options = client.lead_finder.filter_options()
```

```typescript TypeScript SDK (beta)
import { FoxReach } from "foxreach";

const client = new FoxReach({ apiKey: "otr_your_key" });
const options = await client.leadFinder.filterOptions();
```
</RequestExample>

<ResponseExample>
```json
{
  "data": {
    "industries": ["Computer Software", "Marketing & Advertising"],
    "companyTypes": ["Privately Held", "Public Company"],
    "headcountGrowthTimespans": ["6months", "12months", "24months"],
    "allowedCountries": [],
    "blockedCountries": ["DE", "FR"],
    "coverage": "every country",
    "personFilterKeys": {
      "jobTitles": "Current job title, e.g. Founder, CEO (include)",
      "countries": "Alpha-2 country codes for where the person is"
    },
    "companyFilterKeys": {
      "names": "Company name (include)",
      "minHeadcount": "Minimum headcount"
    }
  }
}
```
</ResponseExample>

## Errors

| Status | Description |
|--------|-------------|
| `401` | Missing, invalid, revoked or expired API key |
| `403` | API key does not have the required scope: `read` |
| `404` | `Lead Finder is not enabled` while Lead Finder is switched off on this environment |
| `503` | `Lead Finder is not configured` when it is enabled but has no data provider key |

## Rate Limit

- **100 requests per minute, per API key.** Fixed 60-second window.
- Every response includes `X-RateLimit-Limit`, `X-RateLimit-Remaining`, and `X-RateLimit-Reset` (unix epoch seconds).
- A `429` response includes a `Retry-After` header (seconds until the bucket resets).

For client-side patterns (`Retry-After`, exponential backoff, monitoring `X-RateLimit-Remaining`), see [Rate Limiting](/rate-limiting).