---
title: "Mark a USDC address as Trusted Beneficiary (business)"
method: POST
path: "/business/beneficiary/address/trust"
tags: ["Business Trusted Beneficiary"]
---

# Mark a USDC address as Trusted Beneficiary (business)

`POST /business/beneficiary/address/trust`

## Request

- Base URL: `https://www.sandbox.striga.com/api/v1`
- URL: `https://www.sandbox.striga.com/api/v1/business/beneficiary/address/trust`
- Auth: API key in header `api-key` and API key in header `Authorization`

Single-call TOTP-confirmed trust for a business USDC address. Only `USDC`, `USDC_POLYGON`, and `USDC_SOL` addresses are eligible; other currencies are rejected with `30075` (`CURRENCY_NOT_TRUSTABLE`). The address must already be whitelisted and activated, otherwise the request is rejected with `30073`. The supplied `totpCode` is verified in the same request.

## Request body

- object
  - `businessId` string, uuid, required
  - `whitelistedAddressId` string, uuid, required
  - `totpCode` string, required: 6–8 character TOTP or recovery code, verified at the time of the request.

## Response `200`

Trust applied.

- object
  - `ok` boolean, required

## Other responses

- `400`: Request was rejected. The `errorCode` field disambiguates (e.g. `30075` `CURRENCY_NOT_TRUSTABLE`).
- `401`: Invalid API key or HMAC signature.

---

[API](https://skmtc.dev/striga/apis/striga-strong-customer-authentication.md) - [All operations](https://skmtc.dev/striga/apis/striga-strong-customer-authentication/llms.txt) - [OpenAPI document](https://skmtc.dev/striga/apis/striga-strong-customer-authentication/revisions/6a0cf1c67072?raw)