Businesses

Create a Business, owned by the authenticated Marketplace member

List the authenticated Marketplace member's own Businesses

Get a Business

Update a Business (owner only)

Soft-delete a Business (owner only)

Ops-only in practice (Phase 34, fronted by apps/ops-console); no RBAC guard yet — see docs/security/rbac-strategy.md.

Unauthenticated by design (Phase 34) — interim ops-console review action; see BusinessesService.setVerification's doc comment.

Invite a team member with a role (ADMIN+, Phase 34)

List a Business's team (ADMIN+)

Change a team member's role (ADMIN+)

Remove a team member (ADMIN+; cannot remove the owner)

Add a Branch (location) to a Business (owner only)

List a Business's Branches

Update a Branch (owner only)

Remove a Branch (owner only)

Toggle a Branch's Space eligibility flag (owner only). Phase 23 hook only — no Space product logic exists yet.

Link a Merchant account to a Business (owner only, many-to-many)

List a Business's linked Merchant accounts

Revoke a Business<->Merchant link (owner only)

Reverse lookup — a Merchant's linked Businesses. Deliberately not nested under /v1/merchants/* — that prefix is routed to merchant-service by api-gateway's ROUTES table (prefix match), so a route nested there would never reach business-service.