---
title: "Company Register Social"
method: POST
path: "/companies/register-social"
tags: ["COMPANY"]
---

# Company Register Social

`POST /companies/register-social`

## Request

- Base URL: `https://api.myaltimate.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.myaltimate.com/companies/register-social`
- Auth: HTTP bearer

Provision a new tenant for a socially-authenticated (Google) user.

Runs on the public tenant against a verified SuperTokens session — the user
has already completed Google OAuth and passed the Workspace `hd` gate in the
sign-in-up hook. Email comes from the session (never from the client); only
the instance name (and optional display name) come from the request.
Creates the tenant + Owner + billing + community credits and returns the
gateway credential. If the instance name is taken, returns
``status="instance_taken"`` so the UI can re-prompt.

## Request body

- SocialRegisterIn: Provision a new tenant for a socially-authenticated (OAuth) user. Email is taken from the verified SuperTokens session; the client supplies the chosen instance name and, optionally, the display name read from the OAuth profile (falls back to the email local-part when absent).
  - `company` string, required
  - `newsletter` boolean
  - `first_name` string, nullable
  - `last_name` string, nullable
  - `source_insight` string, nullable
  - `referral_code` string, nullable
  - `survey_responses` object, nullable
  - `primary_warehouse` string, nullable
  - `role` string, nullable

## Response `200`

Successful Response

- SocialRegisterResponse: Result of provisioning a tenant for a social (OAuth) signup. On success, carries a short-lived ``login_token`` the client exchanges (via /auth/social/exchange) for the gateway credential — the raw api_key is never returned to the client. When the chosen instance name is taken (or belongs to an instance running its own IdP), ``status == "instance_taken"`` and the fields are null so the UI can re-prompt — the two negatives are intentionally indistinguishable so the response can't enumerate SSO instances.
  - `status` 'ok' | 'instance_taken', required
  - `instance` string, nullable
  - `api_url` string, nullable
  - `login_token` string, nullable

## Other responses

- `400`: Bad request.
- `403`: Forbidden in the tenant domain.
- `422`: Validation Error

---

[API](https://skmtc.dev/myaltimate/apis/myaltimate-api.md) - [All operations](https://skmtc.dev/myaltimate/apis/myaltimate-api/llms.txt) - [OpenAPI document](https://skmtc.dev/myaltimate/apis/myaltimate-api/revisions/727657ce54e9?raw)