One API for the whole merchant risk lifecycle.

Get a sandbox key. Create one under Profile, then Account Settings, then Partner API Keys. Open the sandbox portal
Start a profile. POST the business details. The response has a request_id. Try it in the API explorer
Poll for the result. A 425 means wait. A 206 has partial data. A 200 is complete.

Read the full quickstart

curl -X POST https://sandbox-api.coris.ai/api/v0_2/merchant_profiler/ \
  -H 'Authorization: Token YOUR_SANDBOX_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"business_name": "Acme Plumbing Co.", "address": {"city": "San Jose", "state": "CA", "country": "US", "address_type": "Registration"}}'

# Copy the request_id from the response, then poll.
curl -i 'https://sandbox-api.coris.ai/api/v0_2/merchant_profiler/?request_id=REQUEST_ID' \
  -H 'Authorization: Token YOUR_SANDBOX_KEY'

import time
import requests

API = "https://sandbox-api.coris.ai/api/v0_2"
HEADERS = {"Authorization": "Token YOUR_SANDBOX_KEY"}
BUSINESS = {
    "business_name": "Acme Plumbing Co.",
    "address": {"city": "San Jose", "state": "CA", "country": "US", "address_type": "Registration"},
}

start = requests.post(f"{API}/merchant_profiler/", headers=HEADERS, json=BUSINESS)
start.raise_for_status()
request_id = start.json()["request_id"]

while True:
    result = requests.get(
        f"{API}/merchant_profiler/", headers=HEADERS, params={"request_id": request_id}
    )
    if result.status_code == 200:
        break
    if result.status_code not in (206, 425):
        result.raise_for_status()
    time.sleep(5)

print(result.json()["legal_entity"]["status"])

const API = 'https://sandbox-api.coris.ai/api/v0_2';
const headers = {
  Authorization: 'Token YOUR_SANDBOX_KEY',
  'Content-Type': 'application/json',
};

const start = await fetch(`${API}/merchant_profiler/`, {
  method: 'POST',
  headers,
  body: JSON.stringify({
    business_name: 'Acme Plumbing Co.',
    address: { city: 'San Jose', state: 'CA', country: 'US', address_type: 'Registration' },
  }),
});
const { request_id: requestId } = await start.json();

let result;
do {
  await new Promise(resolve => setTimeout(resolve, 5000));
  result = await fetch(`${API}/merchant_profiler/?request_id=${requestId}`, { headers });
  if (![200, 206, 425].includes(result.status)) throw new Error(`Coris returned ${result.status}`);
} while (result.status !== 200);

console.log((await result.json()).legal_entity.status);

For AI agents

Agents can read these docs and call Coris

MCP server

docs.coris.ai/mcp

llms.txt

docs.coris.ai/llms.txt

OpenAPI spec

docs.coris.ai/reference

Agent instructions

docs.coris.ai/docs/agents.md

200The endpoint is enabled.

400The request was rejected. Read the plain-text body, fix the request and resend.

401The key is missing, or it is wrong for this host. Send Authorization: Token YOUR_API_KEY with a key issued for this environment.

403The key's user does not have access to manage organization settings. Ask Coris support. A scoped key cannot use this route, and gets JSON with detail. Use a key without account limits.

404No item has this ID in your workspace. Check the ID and the environment.

429You passed a rate limit. If Retry-After is present, wait that many seconds, then retry. If it is absent, you hit the concurrency limit, so back off for a few seconds and reduce parallel calls.

500Coris could not complete the request. Retry with backoff. If it continues, contact support.