---
title: "partner/onboarding/application/open"
method: POST
path: "/partner/onboarding/application/open"
tags: ["Partner Endpoints"]
---

# partner/onboarding/application/open

`POST /partner/onboarding/application/open`

## Request

- Base URL: `https://earthnode-dev.vopay.com/api/v2`
- URL: `https://earthnode-dev.vopay.com/api/v2/partner/onboarding/application/open`
- Auth: none declared

Partner portal Onboarding Tracker Open action. Returns a login link to the entity's onboarding application that skips the applicant's one-time passcode and carries a live bearer token, so treat it as a credential. The response is sent with Cache-Control: no-store, and the link is left out of the API log and the note. The entity must be in the partner's book, in Application Pending, and have an onboarding application: an entity that does not exist, one outside the book and one with no status get the same not-found error as the application details, and one in another stage or without an application gets an invalid-action error. If the onboarding app cannot be reached or fails, the request fails with an integration error. Writes an account note (a partner note for a child partner) naming the portal user, without the link. Requires a partner portal session (bearer token) of an Admin user and the AccountOnboardingFormAccess permission; Viewer and Support users are rejected.

## Request body `application/x-www-form-urlencoded`

- object
  - `EntityType` string, required: Partner, Account or SubAccount, as the entity list returns it.
  - `EntityID` string, required: The entity's EntityID from the entity list: the account ID, or the child partner's partner account ID.

## Response `200`

- object
  - `Success` boolean, required: True if the request was successful, false if it failed
  - `ErrorMessage` string, required: Contains a description of the error if the request failed
  - `OnboardingURL` string, required: Login link to the onboarding application, skipping the applicant's one-time passcode. It carries a live bearer token: treat it as a credential and never store or share it.

## Changes

- **2026-11-03** `71f251deb318`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/vopay/apis/accounts/changes/partner/onboarding/application/open/post.md)

---

[API](https://skmtc.dev/vopay/apis/accounts.md) - [All operations](https://skmtc.dev/vopay/apis/accounts/llms.txt) - [OpenAPI document](https://skmtc.dev/vopay/apis/accounts/revisions/71f251deb318?raw)