> This page is for API, version 2026-01-01 (Stable) (default). > For other versions, use one of these documentation indexes: > - 2026-01-01 (Stable) (default): https://developer.deel.com/api/stable/llms.txt > For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://developer.deel.com/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://developer.deel.com/_mcp/server. # Create a child organization bank account POST https://api.letsdeel.com/rest/organizations/children/{child_id}/payment-methods Content-Type: application/json Add a US bank account (ACH direct debit) to one of your child organizations. Deel sends two micro-deposits to the account; confirm their amounts with the verify call to activate it. The child organization must have a US legal entity, have completed verification, and have ACH enabled. Nothing is debited until the method is set as the default. **Token scopes**: `organizations:write` **Beta**: this version requires the `X-Beta: true` request header and its contract may change before it is promoted to stable. It is scheduled to become stable on 2027-02-12. Reference: https://developer.deel.com/api/reference/endpoints/organizations/create-child-organization-payment-method-v-2026-11-12 ## Authentication - `Authorization` header (bearer token, required) — ## Authentication The Deel API uses bearer tokens to authenticate requests. All API calls must be made over HTTPS — calls over plain HTTP or without authentication will fail. ```curl curl -X GET 'https://api.letsdeel.com/rest/v2/contracts' \ -H 'Authorization: Bearer YOUR-TOKEN-HERE' ``` [Learn more about authentication](/api/authentication) - `Authorization` header (bearer token, required) — Standard OAuth2 security scheme based on https://swagger.io/docs/specification/authentication/ ## Servers - `https://api.letsdeel.com/rest` (Production, default) - `https://api-staging.letsdeel.com/rest` (Demo) ## Request ### Path parameters - `child_id` (string, required) — Public id of the child organization, as returned in the id field of the create child organization response. It must be a direct child organization of the authenticated organization; any other id answers 403, an unknown id 404. ### Headers - `Idempotency-Key` (string, required) — Unique key, per child organization, that makes the request idempotent. Replaying the same key for the same child organization returns the original response without adding a second bank account. Reusing a key for the same child organization with a different body returns 409 IDEMPOTENCY_CONFLICT. - `X-Beta` (enum, required, default: true) — Opts in to the beta version of this endpoint. Must be `true`. - Allowed values: `true` ### Body (application/json) This endpoint expects an object. - `data` (OrganizationsChildrenChildIdPaymentMethodsPostRequestBodyContentApplicationJsonSchemaData, required) — The request payload. ## Response ### 201 The bank account was added and the micro-deposits are on their way. Status is PENDING_VERIFICATION. - `data` (OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaData, required) — The bank account as stored by Deel. The full account and routing numbers are never returned. ## Errors ### 400 Bad Request Error Bad request. Nothing is written. The request body failed validation (the error item names the offending key), or the Idempotency-Key header is missing or longer than 64 characters. - `errors` (list of OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaErrorsItems, required) ### 401 Unauthorized Error Unauthorized. The request token is missing or invalid. - `errors` (list of OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaErrorsItems, required) ### 403 Forbidden Error Forbidden. The child organization is not a direct child of the caller, the feature is not enabled for the caller, or the token carries no person. Nothing is written. - `errors` (list of OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaErrorsItems, required) ### 404 Not Found Error Not found. No organization has the given child_id. Nothing is written. - `errors` (list of OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaErrorsItems, required) ### 409 Conflict Error Conflict. The same account is already active on this child organization, is pending verification in other organizations (retry after 24 hours), or the Idempotency-Key was reused with a different body. Nothing is written. - `errors` (list of OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaErrorsItems, required) ### 422 Unprocessable Entity Error Unprocessable. NOT_ELIGIBLE: the child organization cannot pay by ACH yet; details.reason is one of NO_US_LEGAL_ENTITY, ORGANIZATION_NOT_VERIFIED, ACH_DISABLED. INVALID_BANK_ACCOUNT: the bank rejected the numbers; details.reason is account_number_invalid or routing_number_invalid. Nothing is written. - `errors` (list of OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaErrorsItems, required) ### 429 Too Many Requests Error Too many requests. The child organization has 3 unverified accounts or added 5 accounts in the last 24 hours (details.reason says which), or another request for this child organization is still in progress. Nothing is written. - `errors` (list of OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaErrorsItems, required) ### 500 Internal Server Error An unexpected error occurred. Nothing is written, and the same request can be retried with the same Idempotency-Key. - `errors` (list of OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaErrorsItems, required) ## Types ### OrganizationsChildrenChildIdPaymentMethodsPostRequestBodyContentApplicationJsonSchemaData The request payload. - `type` (enum, required) — Payment rail. Only ACH in this version. - Allowed values: `ACH` - `account_type` (enum, required) — Checking or savings. - Allowed values: `CHECKING`, `SAVINGS` - `account_number` (string, required) — Account number, digits only. Never returned by any endpoint. - `routing_number` (string, required) — Nine-digit ABA routing number of the bank. - `account_holder_name` (string, required) — Name on the bank account. ### OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaData The bank account as stored by Deel. The full account and routing numbers are never returned. - `id` (integer, required) — Id of the payment method. Use it in the verify, update and remove calls. - `type` (enum, required) — Payment rail of the method. Only ACH in this version. - Allowed values: `ACH` - `last4` (string, required) — Last four digits of the account number. - `status` (enum, required) — PENDING_VERIFICATION until the two micro-deposit amounts are confirmed; VERIFIED once they are; ON_HOLD when the account is verified but the child organization has not completed its own verification yet; VERIFICATION_FAILED after three wrong attempts (it stays so while Deel reviews a bank statement, and becomes VERIFIED on approval); REMOVED after deletion. - Allowed values: `PENDING_VERIFICATION`, `VERIFIED`, `ON_HOLD`, `VERIFICATION_FAILED`, `REMOVED` - `created_at` (string, required) — When the method was added. - `is_default` (boolean, required) — Whether Deel debits this account for the child organization’s invoices. - `account_type` (enum, required) — Checking or savings. - Allowed values: `CHECKING`, `SAVINGS` - `is_deletable` (boolean, required) — Whether a remove call would succeed right now. - `attempts_remaining` (integer, required) — Micro-deposit confirmation attempts left before the method needs a bank statement. - `account_holder_name` (string, required) — Name on the bank account, as submitted. - `verification_method` (enum, required) — How the account is verified. Only micro-deposits in this version. - Allowed values: `MICRO_DEPOSITS` - `bank_name` (string, optional, nullable) — Name of the bank. Not available in this version; always null. - `status_reason` (enum, optional, nullable) — Why the method is on hold, when it is. Null otherwise. - Allowed values: `NO_US_LEGAL_ENTITY`, `ORGANIZATION_NOT_VERIFIED`, `ACH_DISABLED` - `not_deletable_reason` (enum, optional, nullable) — Why the method cannot be deleted, when it cannot. Null otherwise. - Allowed values: `USED_IN_AUTOMATIC_PAYMENT`, `USED_AS_BACKUP` ### OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaErrorsItems - `code` (enum, required) — Machine-readable error code. - Allowed values: `GENERIC_ERROR` - `message` (string, required) — Human-readable explanation of the error. - `details` (OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaErrorsItemsDetails, optional) — Extra context for the code, when any: the ineligibility, rate-limit or not-deletable reason. ### OrganizationsChildrenChildIdPaymentMethodsPostResponsesContentApplicationJsonSchemaErrorsItemsDetails Extra context for the code, when any: the ineligibility, rate-limit or not-deletable reason. - `reason` (string, optional) — Why the request was refused, for the NOT_ELIGIBLE, INVALID_BANK_ACCOUNT, RATE_LIMITED and NOT_DELETABLE codes. - `attempts_remaining` (string, optional) — Micro-deposit attempts left, for the INVALID_AMOUNTS code. ## Examples **Request** ```json { "data": { "type": "ACH", "account_type": "CHECKING", "account_number": "000222222227", "routing_number": "110000000", "account_holder_name": "Acme Inc" } } ``` **Response** ```json { "data": { "id": 635390, "type": "ACH", "last4": "2227", "status": "PENDING_VERIFICATION", "created_at": "2026-10-16T04:49:58Z", "is_default": false, "account_type": "CHECKING", "is_deletable": true, "attempts_remaining": 3, "account_holder_name": "Acme Inc", "verification_method": "MICRO_DEPOSITS", "bank_name": "Chase", "status_reason": "ORGANIZATION_NOT_VERIFIED", "not_deletable_reason": "USED_IN_AUTOMATIC_PAYMENT" } } ``` **SDK Code** ```python import requests url = "https://api.letsdeel.com/rest/organizations/children/8f1d2e3a-4b5f-4a2c-9c4e-1c0e6f1c4a52/payment-methods" payload = { "data": { "type": "ACH", "account_type": "CHECKING", "account_number": "000222222227", "routing_number": "110000000", "account_holder_name": "Acme Inc" } } headers = { "Idempotency-Key": "a1b2c3d4-e5f6-7890-abcd-ef1234567890", "X-Beta": "true", "Authorization": "Bearer ", "Content-Type": "application/json" } response = requests.post(url, json=payload, headers=headers) print(response.json()) ``` ```javascript const url = 'https://api.letsdeel.com/rest/organizations/children/8f1d2e3a-4b5f-4a2c-9c4e-1c0e6f1c4a52/payment-methods'; const options = { method: 'POST', headers: { 'Idempotency-Key': 'a1b2c3d4-e5f6-7890-abcd-ef1234567890', 'X-Beta': 'true', Authorization: 'Bearer ', 'Content-Type': 'application/json' }, body: '{"data":{"type":"ACH","account_type":"CHECKING","account_number":"000222222227","routing_number":"110000000","account_holder_name":"Acme Inc"}}' }; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go package main import ( "fmt" "strings" "net/http" "io" ) func main() { url := "https://api.letsdeel.com/rest/organizations/children/8f1d2e3a-4b5f-4a2c-9c4e-1c0e6f1c4a52/payment-methods" payload := strings.NewReader("{\n \"data\": {\n \"type\": \"ACH\",\n \"account_type\": \"CHECKING\",\n \"account_number\": \"000222222227\",\n \"routing_number\": \"110000000\",\n \"account_holder_name\": \"Acme Inc\"\n }\n}") req, _ := http.NewRequest("POST", url, payload) req.Header.Add("Idempotency-Key", "a1b2c3d4-e5f6-7890-abcd-ef1234567890") req.Header.Add("X-Beta", "true") req.Header.Add("Authorization", "Bearer ") req.Header.Add("Content-Type", "application/json") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby require 'uri' require 'net/http' url = URI("https://api.letsdeel.com/rest/organizations/children/8f1d2e3a-4b5f-4a2c-9c4e-1c0e6f1c4a52/payment-methods") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Post.new(url) request["Idempotency-Key"] = 'a1b2c3d4-e5f6-7890-abcd-ef1234567890' request["X-Beta"] = 'true' request["Authorization"] = 'Bearer ' request["Content-Type"] = 'application/json' request.body = "{\n \"data\": {\n \"type\": \"ACH\",\n \"account_type\": \"CHECKING\",\n \"account_number\": \"000222222227\",\n \"routing_number\": \"110000000\",\n \"account_holder_name\": \"Acme Inc\"\n }\n}" response = http.request(request) puts response.read_body ``` ```java import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.post("https://api.letsdeel.com/rest/organizations/children/8f1d2e3a-4b5f-4a2c-9c4e-1c0e6f1c4a52/payment-methods") .header("Idempotency-Key", "a1b2c3d4-e5f6-7890-abcd-ef1234567890") .header("X-Beta", "true") .header("Authorization", "Bearer ") .header("Content-Type", "application/json") .body("{\n \"data\": {\n \"type\": \"ACH\",\n \"account_type\": \"CHECKING\",\n \"account_number\": \"000222222227\",\n \"routing_number\": \"110000000\",\n \"account_holder_name\": \"Acme Inc\"\n }\n}") .asString(); ``` ```php request('POST', 'https://api.letsdeel.com/rest/organizations/children/8f1d2e3a-4b5f-4a2c-9c4e-1c0e6f1c4a52/payment-methods', [ 'body' => '{ "data": { "type": "ACH", "account_type": "CHECKING", "account_number": "000222222227", "routing_number": "110000000", "account_holder_name": "Acme Inc" } }', 'headers' => [ 'Authorization' => 'Bearer ', 'Content-Type' => 'application/json', 'Idempotency-Key' => 'a1b2c3d4-e5f6-7890-abcd-ef1234567890', 'X-Beta' => 'true', ], ]); echo $response->getBody(); ``` ```csharp using RestSharp; var client = new RestClient("https://api.letsdeel.com/rest/organizations/children/8f1d2e3a-4b5f-4a2c-9c4e-1c0e6f1c4a52/payment-methods"); var request = new RestRequest(Method.POST); request.AddHeader("Idempotency-Key", "a1b2c3d4-e5f6-7890-abcd-ef1234567890"); request.AddHeader("X-Beta", "true"); request.AddHeader("Authorization", "Bearer "); request.AddHeader("Content-Type", "application/json"); request.AddParameter("application/json", "{\n \"data\": {\n \"type\": \"ACH\",\n \"account_type\": \"CHECKING\",\n \"account_number\": \"000222222227\",\n \"routing_number\": \"110000000\",\n \"account_holder_name\": \"Acme Inc\"\n }\n}", ParameterType.RequestBody); IRestResponse response = client.Execute(request); ``` ```swift import Foundation let headers = [ "Idempotency-Key": "a1b2c3d4-e5f6-7890-abcd-ef1234567890", "X-Beta": "true", "Authorization": "Bearer ", "Content-Type": "application/json" ] let parameters = ["data": [ "type": "ACH", "account_type": "CHECKING", "account_number": "000222222227", "routing_number": "110000000", "account_holder_name": "Acme Inc" ]] as [String : Any] let postData = JSONSerialization.data(withJSONObject: parameters, options: []) let request = NSMutableURLRequest(url: NSURL(string: "https://api.letsdeel.com/rest/organizations/children/8f1d2e3a-4b5f-4a2c-9c4e-1c0e6f1c4a52/payment-methods")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "POST" request.allHTTPHeaderFields = headers request.httpBody = postData as Data let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```