curl --request POST \
--url https://api.gigstack.io/v2/teams/{id}/vendors \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"alias": "<string>",
"legal_name": "<string>",
"tax_id": "<string>",
"metadata": {},
"members": [
"<string>"
],
"livemode": true
}
'const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
operation_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
alias: '<string>',
legal_name: '<string>',
tax_id: '<string>',
metadata: {},
members: ['<string>'],
livemode: true
})
};
fetch('https://api.gigstack.io/v2/teams/{id}/vendors', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.gigstack.io/v2/teams/{id}/vendors"
payload = {
"operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"alias": "<string>",
"legal_name": "<string>",
"tax_id": "<string>",
"metadata": {},
"members": ["<string>"],
"livemode": True
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"data": {
"vendor_id": "<string>",
"master_team_id": "<string>",
"billing_account_id": "<string>",
"owner_id": "<string>",
"alias": "<string>",
"legal_name": "<string>",
"tax_id": "<string>",
"is_vendor": true,
"livemode": true,
"operation": {
"operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"vendor_id": "<string>",
"status": "completed",
"replayed": true
},
"browser_handoff": "<string>",
"capability_delivery": "private_browser_only",
"operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"status": "completed",
"permanent_noncompletion": false,
"generation": 123,
"expires_at": 123,
"created_by": "<string>",
"purpose": "public_csd_onboarding",
"effect_scope": "team_shared",
"legacy_sessions_may_remain": true
}
}Create vendor account
Creates an actual vendor with current master owner, owner-only membership, private capability/OTP and atomic account/profile/grants. Current editors may create unless supplierMode is false. Save UUID before sending; reconcile/retry identical input with same UUID. Returns safe metadata only.
curl --request POST \
--url https://api.gigstack.io/v2/teams/{id}/vendors \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"alias": "<string>",
"legal_name": "<string>",
"tax_id": "<string>",
"metadata": {},
"members": [
"<string>"
],
"livemode": true
}
'const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
operation_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
alias: '<string>',
legal_name: '<string>',
tax_id: '<string>',
metadata: {},
members: ['<string>'],
livemode: true
})
};
fetch('https://api.gigstack.io/v2/teams/{id}/vendors', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://api.gigstack.io/v2/teams/{id}/vendors"
payload = {
"operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"alias": "<string>",
"legal_name": "<string>",
"tax_id": "<string>",
"metadata": {},
"members": ["<string>"],
"livemode": True
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"data": {
"vendor_id": "<string>",
"master_team_id": "<string>",
"billing_account_id": "<string>",
"owner_id": "<string>",
"alias": "<string>",
"legal_name": "<string>",
"tax_id": "<string>",
"is_vendor": true,
"livemode": true,
"operation": {
"operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"vendor_id": "<string>",
"status": "completed",
"replayed": true
},
"browser_handoff": "<string>",
"capability_delivery": "private_browser_only",
"operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"status": "completed",
"permanent_noncompletion": false,
"generation": 123,
"expires_at": 123,
"created_by": "<string>",
"purpose": "public_csd_onboarding",
"effect_scope": "team_shared",
"legacy_sessions_may_remain": true
}
}Authorizations
Authentication Method: HTTP Bearer token.
The runtime requires the literal Bearer prefix — a bare token in the
Authorization header is rejected with 401 unauthorized.
Header Format: Authorization: Bearer YOUR_API_KEY
Your API key is a JWT. Live keys operate on live data (livemode: true);
test keys operate on isolated test data (livemode: false).
Get your key at: app.gigstack.pro/settings?tab=api
Errors: credential failures are answered by the authentication layer with a raw
{ "message": … } body, not the standardized envelope — 401 for a missing, malformed or
expired token, 403 for a revoked key or a plan without API access. See the Unauthorized
and AuthForbidden responses.
Path Parameters
^[A-Za-z0-9_-]{1,128}$Body
^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-4[0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$1 - 25025020Only the current master owner is permitted. Additional admins require reviewed add_admin approval before any effect.
^[A-Za-z0-9_-]{1,128}$Must match the original credential data mode.
Response
Safe vendor metadata or operation/capability status. Never returns raw onboarding URLs.
Show child attributes
Show child attributes