When it applies
A partner stays public until Leap Financial turns on invite-only access. While the partner is public, anyone with areferenceId can originate a transfer, and POST /partner/invitations returns 403 INVITE_ONLY_NOT_ENABLED.
When invite-only is on, the person who starts a send, cash deposit, money request, or deferred payout must redeem a code first. The person who pays a fund request, or claims a payout, does not.
Host and authentication: Partner API overview.
Check access
granted: true. An invite-only partner returns granted: false until that referenceId redeems a code.
Creating an originating link without a grant returns 403 USER_NOT_INVITED.
Codes
Single-use codes are generated by the API. Universal codes are a shared passcode, for example#lola123ABC. Matching ignores case, a leading #, and surrounding spaces.
The phone number on an SMS is for delivery tracking. The code is not bound to that phone.
Templates
linkTemplate is an https URL that contains {code}. smsTemplate must contain {code} and may contain {link} only when a link template exists. Any other {placeholder} is 400 INVALID_TEMPLATE.
The SMS sender is configured by Leap. Until it is set, sending an SMS returns 409 INVITATION_SMS_NOT_CONFIGURED.
Who entered
GET /partner/access-grants lists people who redeemed a code. Reference ids in that list and in the CSV export stay masked.