# Tera Contracted Supplier API

> Sandbox and production guides for the Tera Contracted Supplier API V1.

- [Contracted Supplier API](https://docs.terabusinessfinance.com/index.md): Poll-based V1 API for authorised contracted suppliers to submit UK business-finance enquiries.
- [Sandbox quick start](https://docs.terabusinessfinance.com/guides/sandbox-quickstart.md): Create a synthetic basic submission against the sandbox host with a test credential.
- [Authentication](https://docs.terabusinessfinance.com/guides/authentication.md): Bearer credentials, environment binding, and scopes for the Contracted Supplier API.
- [Basic submissions](https://docs.terabusinessfinance.com/guides/basic-submission.md): Create a basic Supplier Submission for human qualification without creating an Application.
- [Application-level submissions](https://docs.terabusinessfinance.com/guides/application-submission.md): Create an application-level Supplier Submission that can become one Tera Application.
- [Status polling](https://docs.terabusinessfinance.com/guides/status-polling.md): Poll the tenant-scoped supplier-visible status object. V1 has no webhooks.
- [Idempotency](https://docs.terabusinessfinance.com/guides/idempotency.md): Create idempotency uses (supplier_id, external_reference). Correction and promotion use a separate operation key.
- [Contact corrections](https://docs.terabusinessfinance.com/guides/contact-correction.md): Narrow, audited updates to working contact fields on a basic submission.
- [Promotion](https://docs.terabusinessfinance.com/guides/promotion.md): Explicitly turn an accepted basic submission into exactly one Application.
- [Errors](https://docs.terabusinessfinance.com/guides/errors.md): Public HTTP statuses and error envelope. Details are field paths only.
- [Rate limits](https://docs.terabusinessfinance.com/guides/rate-limits.md): Identity-primary limits, secondary IP limits, and the failed-authentication limiter.
- [Key rotation and revocation](https://docs.terabusinessfinance.com/guides/key-rotation.md): How Tera staff rotate and revoke supplier credentials. Secrets are never recoverable.

## OpenAPI Specs

- [openapi](/openapi.json)