Activate Stripe Issuing capability, ToS, webhooks, and default cardholder

POST/api/v1/credit/cards/stripe-issuing/setup

Submits missing Stripe Issuing business_profile fields (annual_revenue, estimated_worker_count), records settings.card_issuing.tos_acceptance, requests the card_issuing capability, subscribes /api/v1/webhooks/stripe to all issuing_* events, and optionally creates a default Cardholder (ich_...) on an owned credit program. Live business operator action (an API token receives 403); sandbox businesses are refused before Stripe calls. Defaults to the business connection. Platform access and platform webhook changes require a signed-in superuser.

Operation ID: setup_stripe_issuing·View as markdown·OpenAPI slice

Authentication

Bearer token authentication. Pass your DayZero API token in the Authorization header and the target business UUID in x-business-id.

Request body

Schema: CreditStripeIssuingSetupRequest

stripe_account_idstring: Owned Stripe account ID (acct_...); defaults to the business's canonical Stripe connection. Other accounts require Stripe metadata proving business and credit-line ownership. platform, or fallback when no business connection exists, requires a signed-in platform superuser; API tokens cannot use it.
annual_revenue_centsinteger: Preceding fiscal year gross annual revenue in cents (business_profile.annual_revenue.amount).
annual_revenue_currencystring: Currency code for annual_revenue_cents (business_profile.annual_revenue.currency).
fiscal_year_endstring: Fiscal year end date (YYYY-MM-DD) for business_profile.annual_revenue.fiscal_year_end; omitted from the Stripe update when not provided.
estimated_worker_countinteger: Estimated worker count (business_profile.estimated_worker_count).
accept_tosboolean: Record acceptance of the Stripe Issuing terms of service (settings.card_issuing.tos_acceptance).
tos_ipstring: IP address to record for Issuing ToS acceptance; defaults to the caller's request IP.
request_card_issuingboolean: Request the card_issuing capability on the Stripe account.
configure_webhooksboolean: Subscribe the platform's enabled /api/v1/webhooks/stripe endpoints to Issuing events. Applied only for signed-in platform superusers; skipped for ordinary business operators.
create_default_cardholderboolean: Create a default company Cardholder (ich_...) and bind it to program_id.
program_idstring: Owned credit program ID to store default_cardholder_id on; required when create_default_cardholder is true. Any supplied program is checked for business ownership before Stripe mutations.
cardholder_namestring: Display name (up to 24 chars) for the default Stripe Cardholder.
billing_addressobject: Billing address (line1, city, state, postal_code, country) for the created Cardholder.

Responses

201Successful Response

Schema: SuccessEnvelope_CreditStripeIssuingStatusResponse_

successboolean
messagestring
codestring
dataCreditStripeIssuingStatusResponse

400Bad Request - Invalid input

Schema: ErrorResponse

errorstringrequired: Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.
messagestringrequired: Human-readable explanation, safe to show to end users.
codestringrequired: Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).
request_idstring: Correlation id for support requests. Echoes the x-request-id request header when one was supplied.
errorsobject: Field-level validation messages keyed by field name. Present on 400/422 validation failures only.

401Unauthorized - Missing or expired token, an MCP OAuth token used against the REST API, or no access to this business

Schema: ErrorResponse

errorstringrequired: Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.
messagestringrequired: Human-readable explanation, safe to show to end users.
codestringrequired: Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).
request_idstring: Correlation id for support requests. Echoes the x-request-id request header when one was supplied.
errorsobject: Field-level validation messages keyed by field name. Present on 400/422 validation failures only.

403Forbidden - Insufficient permissions

Schema: ErrorResponse

errorstringrequired: Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.
messagestringrequired: Human-readable explanation, safe to show to end users.
codestringrequired: Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).
request_idstring: Correlation id for support requests. Echoes the x-request-id request header when one was supplied.
errorsobject: Field-level validation messages keyed by field name. Present on 400/422 validation failures only.

404Not Found - Resource does not exist

Schema: ErrorResponse

errorstringrequired: Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.
messagestringrequired: Human-readable explanation, safe to show to end users.
codestringrequired: Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).
request_idstring: Correlation id for support requests. Echoes the x-request-id request header when one was supplied.
errorsobject: Field-level validation messages keyed by field name. Present on 400/422 validation failures only.

422Validation Error

Schema: ErrorResponse

errorstringrequired: Error category: validation_error, unauthorized, forbidden, not_found, conflict, rate_limited, server_error, or service_unavailable.
messagestringrequired: Human-readable explanation, safe to show to end users.
codestringrequired: Stable machine-readable code in CATEGORY_NNN form (e.g. NOT_FOUND_006, AUTH_010, GEN_002).
request_idstring: Correlation id for support requests. Echoes the x-request-id request header when one was supplied.
errorsobject: Field-level validation messages keyed by field name. Present on 400/422 validation failures only.

Code samples

POST/api/v1/credit/cards/stripe-issuing/setup

bash

curl -X POST 'https://api.ondayzero.com/api/v1/credit/cards/stripe-issuing/setup' \
  -H 'Authorization: Bearer dz_your_token' \
  -H 'x-business-id: YOUR_BUSINESS_ID' \
  -H 'Content-Type: application/json' \
  -d '{
  "stripe_account_id": "string",
  "annual_revenue_cents": 0,
  "annual_revenue_currency": "string",
  "fiscal_year_end": "string",
  "estimated_worker_count": 0,
  "accept_tos": false
}'