List your active sessions
Authorization
OAuth2PasswordBearer In: header
Cookie Parameters
Response Body
application/json
application/json
curl -X GET "https://example.com/api/b/v1/sessions"{ "sessions": [ { "session_id": "string", "ip_address": "string", "user_agent": "string", "created_at": "string", "last_seen_at": "string" } ]}Register a business and begin onboarding POST
Create the business at tier B0 with the caller as its active Owner. The registering user is promoted to Owner, exactly as in E2-1: creating a business never mints a second identity - it reuses the `users` row the caller already has. A duplicate registration number in the same country is refused with a 409 and the next steps spelled out: whoever holds that number in that registry is one company, and the second filing is either a mistake or someone else's business.
Sign out of this business everywhere POST
End every session this member holds for this business. Takes effect on the next request rather than after some delay: every token issued before this moment is refused, including the refresh tokens that would otherwise keep minting access tokens for days.