> ## Documentation Index > Fetch the complete documentation index at: https://docs-pos.solya.app/llms.txt > Use this file to discover all available pages before exploring further. # Create a company (société) > Creates a legal entity together with version 1 of its fiscal identity. `id` is caller-supplied — pick a stable, URL-safe slug; 409s when one already carries it. `country` is ISO-3166-1 alpha-2 and selects the profile that VALIDATES the identifiers: France is an instance, not the model. Identifiers are checked including their CHECK DIGITS — a SIREN that fails Luhn or a VAT number that is not the one built on that SIREN is a 400 with a field error, never a stored value. Every field except `legalName` and `address.country` is optional: an incomplete société is a legitimate state, reported through `gaps`, and is strictly better than an invented identifier. ## OpenAPI ````yaml /openapi.json post /v1/companies openapi: 3.0.3 info: title: Solya POS API version: 1.0.0 description: >- The Solya POS backend HTTP surface. Every documented operation is agent-ready: it carries an `operationId`, an agent-facing `description`, the `pos.*` scopes it enforces (`x-required-permissions`) and an `x-agent-tier`. Success responses return the payload as raw JSON; failures return the `ErrorResponse` envelope (`{ error: { code, message, statusCode } }`). servers: - url: / description: The backend, relative to its deployed origin. security: [] paths: /v1/companies: post: tags: - Network summary: Create a company (société) description: >- Creates a legal entity together with version 1 of its fiscal identity. `id` is caller-supplied — pick a stable, URL-safe slug; 409s when one already carries it. `country` is ISO-3166-1 alpha-2 and selects the profile that VALIDATES the identifiers: France is an instance, not the model. Identifiers are checked including their CHECK DIGITS — a SIREN that fails Luhn or a VAT number that is not the one built on that SIREN is a 400 with a field error, never a stored value. Every field except `legalName` and `address.country` is optional: an incomplete société is a legitimate state, reported through `gaps`, and is strictly better than an invented identifier. operationId: createCompany requestBody: required: true content: application/json: schema: type: object properties: id: type: string minLength: 1 country: type: string pattern: ^[A-Z]{2}$ identity: type: object properties: legalName: type: string minLength: 1 legalForm: type: string minLength: 1 registrationNumber: type: string minLength: 1 vatNumber: type: string minLength: 1 shareCapitalCents: type: integer minimum: 0 maximum: 9007199254740991 registryLabel: type: string minLength: 1 address: type: object properties: lines: type: array items: type: string minLength: 1 postalCode: type: string minLength: 1 city: type: string minLength: 1 country: type: string pattern: ^[A-Z]{2}$ required: - lines - country phone: type: string minLength: 1 email: type: string minLength: 1 statutoryMentions: type: array items: type: string minLength: 1 required: - legalName - address required: - id - country - identity example: id: le-solya country: FR identity: legalName: Solya Retail legalForm: SAS registrationNumber: '732829320' vatNumber: FR44732829320 shareCapitalCents: 1000000 registryLabel: RCS Paris 732 829 320 address: lines: - 12 rue de Rivoli postalCode: '75001' city: Paris country: FR statutoryMentions: - TVA non applicable, art. 293 B du CGI responses: '201': description: The created société and its first identity version. content: application/json: schema: type: object properties: entity: type: object properties: id: type: string minLength: 1 country: type: string pattern: ^[A-Z]{2}$ currentVersion: type: integer minimum: 0 exclusiveMinimum: true maximum: 9007199254740991 required: - id - country - currentVersion additionalProperties: false current: type: object properties: legalEntityId: type: string minLength: 1 version: type: integer minimum: 0 exclusiveMinimum: true maximum: 9007199254740991 effectiveFrom: type: string minLength: 1 fingerprint: type: string minLength: 1 identity: type: object properties: legalName: type: string minLength: 1 legalForm: type: string minLength: 1 registrationNumber: type: string minLength: 1 vatNumber: type: string minLength: 1 shareCapitalCents: type: integer minimum: 0 maximum: 9007199254740991 registryLabel: type: string minLength: 1 address: type: object properties: lines: type: array items: type: string minLength: 1 postalCode: type: string minLength: 1 city: type: string minLength: 1 country: type: string pattern: ^[A-Z]{2}$ required: - lines - country additionalProperties: false phone: type: string minLength: 1 email: type: string minLength: 1 statutoryMentions: type: array items: type: string minLength: 1 required: - legalName - address additionalProperties: false required: - legalEntityId - version - effectiveFrom - fingerprint - identity additionalProperties: false required: - entity - current additionalProperties: false description: The created société and its first identity version. example: entity: id: le-solya country: FR currentVersion: 1 current: legalEntityId: le-solya version: 1 effectiveFrom: '2026-02-01T09:00:00.000Z' fingerprint: >- 9f2c1a5b7e0d4c3f8a6b2e1d9c0f7a4b5e3d2c1f0a9b8c7d6e5f4a3b2c1d0e9f identity: legalName: Solya Retail legalForm: SAS registrationNumber: '732829320' vatNumber: FR44732829320 shareCapitalCents: 1000000 registryLabel: RCS Paris 732 829 320 address: lines: - 12 rue de Rivoli postalCode: '75001' city: Paris country: FR statutoryMentions: - TVA non applicable, art. 293 B du CGI '400': description: >- The request failed schema validation; `error.fieldErrors` lists the fields. content: application/json: schema: $ref: '#/components/schemas/ValidationErrorResponse' '401': description: No valid credential was presented — send a bearer token. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '403': description: The actor is authenticated but lacks the required `pos.*` scope. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '409': description: >- The request conflicts with current state (duplicate id or stale version). content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' '500': description: An unexpected server error — safe to retry idempotent requests. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' security: - bearerAuth: [] components: schemas: ValidationErrorResponse: type: object required: - error additionalProperties: false description: >- A `VALIDATION_FAILED` envelope carrying the offending fields in `fieldErrors`. properties: error: type: object required: - code - message - statusCode additionalProperties: false properties: code: type: string enum: - VALIDATION_FAILED message: type: string statusCode: type: integer fieldErrors: type: array description: >- One entry per rejected field: the field path and why it was rejected. items: type: object required: - field - message additionalProperties: false properties: field: type: string description: Dot-path of the offending field. message: type: string description: Why the field was rejected. ErrorResponse: type: object required: - error additionalProperties: false description: The uniform failure envelope every non-2xx response returns. properties: error: type: object required: - code - message - statusCode additionalProperties: false properties: code: type: string enum: - VALIDATION_FAILED - UNAUTHORIZED - FORBIDDEN - NOT_FOUND - CONFLICT - BUSINESS_RULE_VIOLATION - INTERNAL_ERROR description: >- Machine-readable kernel `ResultCode` — branch on this, not on `message`. message: type: string description: >- Human-readable explanation. Safe to surface; never leaks server internals. statusCode: type: integer description: >- The HTTP status, mirrored into the body so a client need not read headers. securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: JWT description: >- `Authorization: Bearer `. Accepts EITHER a Keycloak access token (scopes-in-token) OR an opaque POS session token; both resolve to the same `pos.*` scope vocabulary the route guards enforce. ````