Businesses

Create a business

POST
/api/v1/businesses

Creates a headless business owned by the calling organization: no owner person, no team member, no contract record and no e-mail. Its hours, place and definition are seeded as for any studio; it has no demo content. A live organization key creates a live business. A test key creates a sandbox business instead (sandbox: true, mode: test): an English sample business with services, variants, a worker and a few orders, at most 10 per organization (409 CONFLICT beyond that); the sample follows industry (AUTO: auto detailing, GENERIC: dog grooming salon with the subject type DOG). name is required; industry defaults to AUTO, timezone to Europe/Prague and currency to CZK (fixed once the business has orders). Select the new business on later requests with the Shyni-Business header. Audited with the API key as the actor. Org-level: send no Shyni-Business header. Requires the businesses:manage scope and an Idempotency-Key header.

Authorization

ApiKeyAuth businesses:manage
headerAuthorizationBearer <shyni_sk_live_*>

An API key, issued once and never retrievable again: an organization key in the developer portal, or a studio key in the studio's admin (Moje studio → API). Send as Authorization: Bearer shyni_sk_live_....

Scope: businesses:manage

Header Parameters

Idempotency-Key*string

Caller-chosen idempotency token for this write. A retry under the SAME key with the SAME body replays the first response; the SAME key with a DIFFERENT body is 422 IDEMPOTENCY_KEY_MISMATCH. See Idempotency above.

Lengthlength <= 64

Request Body

application/json
  1. body
name*string
Lengthlength <= 255
industry?string
Default"AUTO"
Value in"AUTO""GENERIC"
timezone?string
Default"Europe/Prague"
currency?string

ISO 4217 code in upper case. Fixed once the business has orders.

Default"CZK"
customerEmails?string

Whether Shyni e-mails the business's customers, see BusinessCustomerEmails.

Default"off"
Value in"off""branded"

Response Body

The new business.

application/json
  1. response
id*string

Send it as Shyni-Business to act on this business.

name*string
slug*string
industry*string
Value in"AUTO""GENERIC"
timezone*string

IANA time zone.

mode*string
Value in"live""test"
sandbox*boolean

A sandbox business (sample data, simulated payments, test mails); its mode is always test.

archived*boolean
createdAt*string
Formatdate-time
allowedDomains*array<string>

Websites a publishable key of this business may be used from.

customerEmails*|

Whether Shyni e-mails the business's customers. off (default for a new business): nothing is sent, your platform sends its own e-mails from the webhooks. branded: Shyni sends the customer e-mails under your organization's brand, as " přes Shyni". null for a studio the organization only has access to (a studio always mails its own customers).

Value in"off""branded"null
Example Request
curl -X POST 'https://api.shyni.io/api/v1/businesses' \  -H 'Authorization: Bearer shyni_sk_test_YOUR_KEY' \  -H 'Idempotency-Key: 7f3c9a52-1d4e-4b86-a0c7-5e2b9d8f6a13' \  -H 'Content-Type: application/json' \  -d '{  "name": "string"}'

Response 201

The new business.

{  "id": "string",  "name": "string",  "slug": "string",  "industry": "AUTO",  "timezone": "string",  "mode": "live",  "sandbox": true,  "archived": true,  "createdAt": "2019-08-24T14:15:22Z",  "allowedDomains": [    "string"  ],  "customerEmails": "off"}

Response 400

A parameter, header or request body is missing, malformed, or out of range. A request body property the endpoint does not define answers UNKNOWN_FIELD instead, with field naming it.

{  "code": "INVALID_INPUT",  "message": "Parameter perPage must be between 1 and 100."}

Response 401

Missing, malformed, unknown, or revoked API key (INVALID_API_KEY).

{  "code": "INVALID_API_KEY",  "message": "Missing or invalid API key."}

Response 403

The key is valid but the request is refused. Branch on code: INSUFFICIENT_SCOPE (the key lacks the permission this endpoint requires), PLAN_REQUIRED (the studio is not on a plan that includes API keys, Pro and above), ORIGIN_NOT_ALLOWED, SECRET_KEY_IN_BROWSER, or DEMO_STUDIO on a write to the demo studio. See Authentication and Scopes above.

{  "code": "INSUFFICIENT_SCOPE",  "message": "This API key does not have the permission this endpoint requires."}

Response 409

The request is well-formed but the studio's current state forbids it.

{  "code": "CONFLICT",  "message": "The voucher cannot be deactivated because it is not active."}

Response 422

The same Idempotency-Key was already used for a request with a different body, use a new key (see Idempotency above).

{  "code": "IDEMPOTENCY_KEY_MISMATCH",  "message": "This Idempotency-Key was already used for a different request. Use a new key."}

Response 429

Burst rate limit exceeded.

{  "code": "RATE_LIMITED",  "message": "Too many requests. Retry after the time given in the Retry-After header."}