API Reference · Business

Submit Business

Submit legal company details

PUT/v1/applications/{application_id}/business

Paid plan requiredScope:applications:writeMCP:submit_business_details

Applicant authority: email at the domain, or authority_attested: true (the issuer verifies too).

cURL example

cURL request

curl -X PUT "https://api.verifiedinbox.ai/v1/applications/0192a5e0-1234-7000-8000-000000000001/business" \
  -H "Authorization: Bearer vi_live_YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "address": {
      "city": "string",
      "line1": "string",
      "postal_code": "string",
      "region": "string"
    },
    "applicant": {
      "email": "alex@acme.com",
      "name": "Acme Inc."
    },
    "jurisdiction": "us_de",
    "legal_name": "Acme Inc."
  }'

Parameters

Parameter	Type	Description
application_idpathrequired	string (uuid)	Application id.
VI-Environmentheader	string	`live` (default) or `test`. Used for anonymous callers and OAuth access tokens; API keys and web sessions carry their own environment.

Request body

application/json · required

Field	Type	Description
addressrequired	object	Registered business address. Nested fields (6) `city` (string) `country` (string): Default `US`. `line1` (string) `line2` (string) `postal_code` (string) `region` (string)
applicantrequired	object	The person applying on the company's behalf; the issuer may contact them. An email at the domain proves authority. Nested fields (4) `email` (string (email)) `name` (string) `phone` (string) `title` (string)
authority_attestedoptional	boolean	Required when the applicant's email isn't at the domain.
jurisdictionrequired	string	US state code, e.g. `us_de`.
legal_namerequired	string	The company's exact legal name, as registered.
registration_numberoptional	string \| null	State file / registration number, if known (speeds up verification).

Example request payload (BusinessInput)

{
  "address": {
    "city": "string",
    "line1": "string",
    "postal_code": "string",
    "region": "string"
  },
  "applicant": {
    "email": "alex@acme.com",
    "name": "Acme Inc."
  },
  "jurisdiction": "us_de",
  "legal_name": "Acme Inc."
}

Response

200 OKVerification started.

application/json

Field	Type	Description
applicant_authorityrequired	string	— Allowed: `email_domain_match`, `attested`, `missing`
idrequired	string (uuid) \| null	—
inputrequired	BusinessInput \| null	— Nested fields (6) `address` (object): Registered business address. `applicant` (object): The person applying on the company's behalf; the issuer may contact them. An email at the domain proves authority. `authority_attested` (boolean): Required when the applicant's email isn't at the domain. `jurisdiction` (string): US state code, e.g. `us_de`. `legal_name` (string): The company's exact legal name, as registered. `registration_number` (string): State file / registration number, if known (speeds up verification).
matchrequired	CompanyRecord \| null	— Nested fields (9) `active` (boolean) `company_number` (string) `company_type` (string) `incorporation_date` (string (date)) `jurisdiction_code` (string) `name` (string) `registered_address` (string) `source_url` (string) `status` (string)
messagerequired	string \| null	—
providerrequired	string \| null	—
statusrequired	string	— Allowed: `not_started`, `verifying`, `verified`, `needs_info`, `rejected`
updated_atrequired	string (date-time) \| null	—

Example 200 response (Business)

{
  "applicant_authority": "email_domain_match",
  "id": "0192a5e0-1234-7000-8000-000000000001",
  "input": {
    "address": {
      "city": "string",
      "country": "string",
      "line1": "string",
      "line2": "string",
      "postal_code": "string",
      "region": "string"
    },
    "applicant": {
      "email": "alex@acme.com",
      "name": "Acme Inc.",
      "phone": "string",
      "title": "string"
    },
    "authority_attested": true,
    "jurisdiction": "us_de",
    "legal_name": "Acme Inc.",
    "registration_number": "string"
  },
  "match": {
    "active": true,
    "company_number": "string",
    "company_type": "string",
    "incorporation_date": "2026-10-31",
    "jurisdiction_code": "string",
    "name": "Acme Inc.",
    "registered_address": "string",
    "source_url": "https://verifiedinbox.ai/verify/0192a5e0-1234-7000-8000-000000000001/domain",
    "status": "string"
  },
  "message": "Everything checks out.",
  "provider": "string",
  "status": "not_started",
  "updated_at": "2026-10-31T12:00:00Z"
}

Other responses & possible errors

Expand a status code below to see the error code, description, and example error payload.

400 (invalid_request)`invalid_request` — the request is malformed.

`invalid_request` — the request is malformed.

Example 400 error response

{
  "error": {
    "code": "invalid_request",
    "message": "Please provide a valid domain name."
  }
}

401 (unauthenticated)`unauthenticated` — sign in / send a valid credential. `next_action.kind = sign_in`.

`unauthenticated` — sign in / send a valid credential. `next_action.kind = sign_in`.

Example 401 error response

{
  "error": {
    "code": "unauthenticated",
    "message": "Sign in or provide an API key to continue.",
    "next_action": {
      "kind": "sign_in",
      "title": "Sign in or create an account",
      "url": "/login"
    }
  }
}

402 (payment_required)`payment_required` — this step needs a paid plan. `next_action.kind = checkout`.

`payment_required` — this step needs a paid plan. `next_action.kind = checkout`.

Example 402 error response

{
  "error": {
    "code": "payment_required",
    "message": "This step requires an active paid plan for this domain.",
    "next_action": {
      "kind": "checkout",
      "title": "Continue to checkout"
    }
  }
}

403 (insufficient_scope)`forbidden` / `insufficient_scope` — the credential lacks permission.

`forbidden` / `insufficient_scope` — the credential lacks permission.

Example 403 error response

{
  "error": {
    "code": "insufficient_scope",
    "message": "This API key does not have the required scope for this action."
  }
}

404 (not_found)`not_found` — doesn't exist or isn't accessible to you (never 403).

`not_found` — doesn't exist or isn't accessible to you (never 403).

Example 404 error response

{
  "error": {
    "code": "not_found",
    "message": "We couldn't find that resource."
  }
}

422 (unprocessable)`unprocessable` / `blocked_provider` — understood but can't be done (plain-English reason).

`unprocessable` / `blocked_provider` — understood but can't be done (plain-English reason).

Example 422 error response

{
  "error": {
    "code": "unprocessable",
    "message": "Shared mailbox providers like gmail.com cannot be verified."
  }
}

429 (rate_limited)`rate_limited` — retry after `Retry-After` seconds (`details.retry_after_seconds`). `limit_reached` — a quota is used up; `details.limit` names it and `next_action` offers support.

`rate_limited` — retry after `Retry-After` seconds (`details.retry_after_seconds`). `limit_reached` — a quota is used up; `details.limit` names it and `next_action` offers support.

Example 429 error response

{
  "error": {
    "code": "rate_limited",
    "message": "Too many requests. Please wait a moment and try again."
  }
}

Was it helpful?