Finds the accounts of your program that match the filters, with their personal data and risk state. Use it to get the user_id that blocks, quarantines, and recoveries need.

Send at least one filter: user_id, document, email, phone, device, or risk_state. If you send several, all of them must match; risk_state works on its own. Inside device, send exactly one of merchant_device or koin_device_id. A body without filters returns 400. It is a POST so that documents and emails never travel in the URL.

Returns a list, because an email, document, phone, or device can belong to more than one account. For accounts in RECOVERING, the summary also includes recovery_id and expires_at. You only see accounts of your own program, with data you sent to Koin, and only active emails and phones. No matches is a 200 with an empty accounts.