Online Merchant Application — Create Business Profile

This endpoint creates or updates a business customer profile in the Netevia banking platform. It accepts the authorized person's personal details alongside the business entity's information, including ownership structure and KYB/KYC data. Upon successful submission, the platform returns a confirmation with the assigned profile identifier.

Endpoint

POST /netevia/oma/profile

Authentication

Bearer token required. Obtain via:

POST https://api.banking.netevia.dev/api/auth/v2

Include in header: Authorization: Bearer {token}
Token lifetime: 10 minutes. Refresh via POST /api/auth/refresh.

When to use

Use this endpoint during the partner onboarding flow when registering a new business customer or updating an existing business profile. It is the entry point for the Online Merchant Application (OMA) and Banking API boarding paths. Submit this request after collecting all required KYB (Know Your Business) and KYC (Know Your Customer) information from the business owner.

Request Body

The request body accepts one of two schemas:

• createbusinessprofileomarequest — Standard OMA flow (up to two beneficial owners via primaryOwner and secondaryOwner).
• createbusinessprofilebankingapirequest — Extended Banking API flow, which inherits all OMA fields and adds thirdOwner and fourstOwner for up to four beneficial owners.

Base Profile Fields (inherited by both schemas)

OMA Profile Fields (createbusinessprofileomarequest)

Extended Banking API Fields (createbusinessprofilebankingapirequest)

Inherits all fields from createbusinessprofileomarequest, plus:

Owner Object (ownerrequest)

Used for primaryOwner, secondaryOwner, owner3, owner4, thirdOwner, fourstOwner.

{
  "email": "[email protected]",
  "givenName": "Jane",
  "familyName": "Doe",
  "middleName": "M",
  "agentPayoutProfileId": 101,
  "salesRepresentativeId": 55,
  "partnerId": 12,
  "phone": "5551234567",
  "authorizedPersonTitle": 1,
  "percentageOwnership": 75,
  "ssn": "XXX-XX-XXXX",
  "dateOfBirth": "1980-04-15T00:00:00Z",
  "streetAddress": "123 Main St",
  "extendedAddress": "Apt 4B",
  "city": "Austin",
  "postalCode": "78701",
  "state": 44,
  "legalBusinessName": "Acme Corp LLC",
  "doingBusinessAsName": "Acme Corp",
  "website": "https://www.acmecorp.com",
  "businessType": 1,
  "businessPhone": "5559876543",
  "businessStreetAddress": "456 Commerce Blvd",
  "businessExtendedAddress": "Suite 200",
  "businessCity": "Austin",
  "businessPostalCode": "78702",
  "businessState": 44,
  "employerIdentificationNumber": "12-3456789",
  "primaryOwnerIsPrimaryAuthorizedPerson": true,
  "businessStartDate": "2015-06-01T00:00:00Z",
  "annualBusinessRevenue": 500000,
  "profileType": 1,
  "applicationCreationType": "NeteviaAPI",
  "payrollCustomer": false,
  "secondaryOwner": {
    "firstName": "John",
    "lastName": "Smith",
    "homeAddress": "789 Oak Ave",
    "city": "Austin",
    "state": 44,
    "zipCode": "78703",
    "homePhone": "5554445555",
    "percentageOwnership": 25,
    "ssn": "XXX-XX-XXXX",
    "dob": "1975-09-20T00:00:00Z",
    "email": "[email protected]"
  }
}

Response

200 OK

{
  "profileId": 98432,
  "error": null
}

Error Codes

Common Mistakes

• Submitting ssn as a plain number string instead of the validated pattern — the API enforces a strict regex; SSNs beginning with 666 or 9XX are rejected.
• Providing percentageOwnership for an ownerrequest object below 25 — the minimum for beneficial owners is 25%.
• Using a two-digit or hyphenated EIN format that does not match the expected pattern (^(\d{2})?(\d{7})$ without hyphens).
• Setting primaryOwnerIsPrimaryAuthorizedPerson: true while also submitting a populated primaryOwner object — these are mutually exclusive when the authorized person is the primary owner.
• Sending businessPhone or homePhone with fewer or more than 10 digits, or including hyphens/spaces — only digits are accepted.
• Omitting applicationCreationType when integrating via the Banking API path; use "NeteviaAPI" or "BankingAPI" to ensure correct routing.
• Passing a state value outside the valid range 1–53 for either the personal or business address.

Related Endpoints

• POST /api/auth/v2 — Obtain a Bearer token required for this request
• POST /api/auth/refresh — Refresh an expiring Bearer token
• GET /netevia/oma/profile/{profileId} — Retrieve an existing business profile by ID
• PUT /netevia/oma/profile/{profileId} — Update an existing business profile

Example

curl -X POST https://api.banking.netevia.dev/netevia/oma/profile \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "[email protected]",
    "givenName": "Jane",
    "familyName": "Doe",
    "agentPayoutProfileId": 101,
    "salesRepresentativeId": 55,
    "partnerId": 12,
    "phone": "5551234567",
    "authorizedPersonTitle": 1,
    "percentageOwnership": 75,
    "ssn": "XXX-XX-XXXX",
    "dateOfBirth": "1980-04-15T00:00:00Z",
    "streetAddress": "123 Main St",
    "city": "Austin",
    "postalCode": "78701",
    "state": 44,
    "legalBusinessName": "Acme Corp LLC",
    "doingBusinessAsName": "Acme Corp",
    "businessPhone": "5559876543",
    "businessStreetAddress": "456 Commerce Blvd",
    "businessCity": "Austin",
    "businessPostalCode": "78702",
    "businessState": 44,
    "employerIdentificationNumber": "12-3456789",
    "applicationCreationType": "NeteviaAPI"
  }'