> Toden documentation. For the full index fetch /llms.txt. Every page is available as Markdown by appending .md to its URL. Identity verification uses /api/kyc, Risk Intelligence uses /api/v1; they are separate contracts with different error shapes. Never invent an endpoint, field or enum value: read the API reference page for the operation first.

# Business verification quickstart

> Create a KYB workflow, send a company verification link, and receive its result.

Verify a company through a **Business** workflow. The registry lookup can be combined with documents, declarations and checks on key people. Business verification must be enabled for your organisation.

## 1. Publish a Business workflow

In **Workflows**, create a **Business** workflow in **Sandbox**. Select a supported country and the checks you need, then publish it. Copy its `workflowId`. See [Business verification](/business-verification/business-verification) for products and availability.

## 2. Send a link

Use the workflow's [hosted link](/user-verification/workflows/workflows#2-share-a-hosted-link) to invite many applicants. For one known business, call [`POST /api/kyc/sessions`](/user-verification/server-api/create-session) from your backend with a Sandbox secret key (`sk_test_…`):

```bash
curl "https://api.toden.co/api/kyc/sessions" \
  -H "Authorization: Bearer $TODEN_SECRET_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "workflowId": "wf_AbC123dEf456",
    "externalUserId": "business_42",
    "business": { "country": "NG", "registrationNumber": "RC123456" }
  }'
```

The `201 Created` response includes:

```json
{ "session": { "sessionId": "cmt1gfjce05g547grqbmjsiqf", "url": "https://console.toden.co/verify/pXk3...", "kind": "business" } }
```

Send `session.url` to the applicant. The registry remains the source of truth for any prefilled company details.

## 3. Follow the result

Receive [verification webhooks](/integrate/webhooks/overview) or read the [session status](/user-verification/server-api/verification-status). A company registry result and the workflow's onboarding decision can finish at different times, especially when [key people](/business-verification/key-people) must complete due diligence. Use the final [workflow decision](/user-verification/workflows/decisioning) for your onboarding action.

Next: [Business verification details](/business-verification/business-verification), [webhook payloads](/integrate/webhooks/events/business-verification), and [production setup](/get-started/environments).