---
title: "Start a duplicate-safe inquiry or application session"
method: POST
path: "/applications"
---

# Start a duplicate-safe inquiry or application session

`POST /applications`

## Request

- Base URL: `https://elron.club/api/public/v1`
- URL: `https://elron.club/api/public/v1/applications`
- Auth: none declared. Required headers: `Idempotency-Key`

Requires explicit current privacy consent. A verification link is delivered only to the applicant email and is never returned by this API.

## Headers

- `Idempotency-Key` string, required

## Request body

- ApplicationStartInput
  - `rentalId` string, required
  - `locale` 'de' | 'en'
  - `journey` 'INQUIRY' | 'APPLICATION', required
  - `firstName` string, required
  - `lastName` string, required
  - `email` string, email, required
  - `phone` string, required
  - `desiredDurationMonths` integer, nullable
  - `requestedParkingCount` integer, nullable
  - `privacyConsentAccepted` unknown, required
  - `privacyConsentVersion` '2026-07-13', required

## Response `201`

Verification-required scoped application session

- ApplicationStart
  - `schemaVersion` '2026-07-13', required
  - `rentalId` string, required
  - `journey` 'INQUIRY' | 'APPLICATION', required
  - `status` 'EMAIL_VERIFICATION_REQUIRED', required
  - `reusedExistingApplication` boolean, required
  - `privacyConsentVersion` '2026-07-13', required
  - `verificationDelivery` object, required
  - `session` object, required: Scoped bearer session. It cannot progress until the applicant uses the separately emailed verification link.

## Other responses

- `400`: Input or consent validation failed
- `409`: Idempotency or current-state conflict
- `429`: Rate limit exceeded

---

[API](https://skmtc.dev/elron/apis/elron-club-public-rental-api.md) · [All operations](https://skmtc.dev/elron/apis/elron-club-public-rental-api/llms.txt) · [OpenAPI document](https://skmtc.dev/elron/apis/elron-club-public-rental-api/revisions/c28843a497a2?raw)