Quickstart: submit a business-finance enquiry

Q: Does this complete the application?

No. It starts one. The handoff_url carries the applicant into the secure application flow where identity, bank data and consent are handled — none of which belongs on the public ring.

2 min read

POST/public/v1/enquiries

handoff_urlContinue in the app

Idempotency-KeySafe to retry

Post the enquiry

curl -s -X POST https://api.credicorp.co.uk/public/v1/enquiries \
  -H 'Content-Type: application/json' \
  -H 'Idempotency-Key: 6f9d2c1a-...' \
  -d '{
    "company": { "name": "Northgate Joinery Ltd", "number": "09123456" },
    "contact": { "name": "A. Director", "email": "a@northgate.example" },
    "amount": 30000,
    "purpose": "working_capital"
  }'

A 201 returns the created enquiry's id and a handoff_url. Redirect the applicant there to continue in the secure Credicorp application — never try to complete the application through the public ring.

Always send an Idempotency-Key

Enquiries create a record, so a network retry without a key could submit the same lead twice. Generate one UUID per logical submission and reuse it on retries (see idempotency).

Validate before you post

A missing required field returns a 400 with a field-level error. Validate email and company number client-side first to give the applicant instant feedback and cut failed submissions.

Frequently asked questions

Does this complete the application?

No. It starts one. The handoff_url carries the applicant into the secure application flow where identity, bank data and consent are handled — none of which belongs on the public ring.

Why do I need an Idempotency-Key?

Because a POST that creates a record is not naturally safe to retry. The key lets you retry a timed-out request without risking a duplicate enquiry.

What company details are required?

At minimum a company name and a contact email; a Companies House number is strongly recommended so the handoff can pre-fill. The 400 response names any missing required field.