> ## Documentation Index
> Fetch the complete documentation index at: https://developer.mogl.online/llms.txt
> Use this file to discover all available pages before exploring further.

# Submit the agent's agency W-9 from a represented athlete

> Submits the agent's agency W-9 so athletes on the roster can apply without linking Stripe or PayPal (ENG-1482, ENG-1644, ENG-1650). The document belongs to the agent and covers every current and future athlete on the roster; `athleteId` is only the row it was uploaded from and must be represented. A MOGL employee reviews it once in Back Office and the decision applies to the whole roster. Only the agent's latest W-9 counts, and only once approved: a new upload from any row is pending until reviewed, so it replaces an earlier approval for the whole roster until Back Office approves it. Re-upload is always allowed: a rejected document has to be replaced, and an approved one can be superseded when the agency's details change. The new submission becomes the latest and is reviewed on its own merits. Documents are stored privately because they carry a taxpayer identification number, and are never reachable by URL.
     *
     * Every successful submission, re-uploads included, posts one alert to the W-9 review Slack channel with the agent's name, email and Back Office link (ENG-1666). Back Office can review it from the agent's view or from any athlete on the roster, and a rejection carries a reviewer note (ENG-1668).
     *
     * PDF, JPG and PNG are accepted, up to 25 MB. Back Office previews all three natively: PDFs in its embedded viewer, JPG and PNG as images.



## OpenAPI

````yaml /storage/api-docs/api-docs.json post /agent/athletes/{athleteId}/w9
openapi: 3.0.0
info:
  title: MOGL Core API
  description: >-
    MOGL Platform Core API — powering athlete NIL deals, brand partnerships,
    agent management, payments, messaging, and more.
     *
     * ## Authentication
     * - **JWT Bearer Token**: Most endpoints require a Bearer token obtained via `/api/login`.
     * - **Server-to-Server API Key**: Internal/lambda/cron endpoints use an `X-API-KEY` header.
     *
     * ## Rate Limiting
     * - Registration & login endpoints: 4–15 requests per minute
     * - Public/influencer endpoints: 200 requests per minute
     * - Authenticated endpoints: standard Laravel throttle
  version: 1.0.0
servers:
  - url: http://localhost/mogl/mogl-backend/api
    description: Local
  - url: https://dev-api.mogl.online/api
    description: Dev
  - url: https://staging-api.mogl.online/api
    description: Staging
  - url: https://api.mogl.online/api
    description: Production
security:
  - bearerAuth: []
tags:
  - name: Authentication
    description: Login, registration, password reset
  - name: User Registration - Common
    description: Common user registration & email check
  - name: User Registration - Athlete
    description: Athlete registration & onboarding steps
  - name: User Registration - Partner
    description: Partner/Brand registration & onboarding steps
  - name: User Registration - Agent
    description: Agent registration & onboarding steps
  - name: User Registration - Fan
    description: Fan registration & onboarding steps
  - name: User Profile
    description: User profile management, settings, social media
  - name: Athlete
    description: 'Athlete-specific endpoints: search, details, availability'
  - name: Athlete - Availability Confirmation
    description: Post-hiring availability confirmation workflow
  - name: Athlete - NIL Feed
    description: Athlete NIL feed and partner search
  - name: Athlete - AI Assistant
    description: >-
      AI-powered job assistant for athletes — chat, conversation history, read
      state, and clarification drafts
  - name: Athlete - AI Waitlist
    description: AI Athlete Assistant waitlist status, social proof, and joining
  - name: Partner
    description: Partner/Brand-specific endpoints
  - name: Partner - External Job
    description: External job link & applicant management
  - name: Partner - Deliverable Report
    description: Deliverable detail reports for brands
  - name: Partner - Screening Questions
    description: Screening question reports
  - name: Partner - Contract Management
    description: Brand contract management with athletes
  - name: Partner - Content Library
    description: Brand content library for deliverable assets
  - name: Agent
    description: Agent profile, athlete management, contracts
  - name: Agent - Athletes
    description: Agent-athlete relationship management
  - name: Agent - Stripe
    description: Agent payment methods & billing via Stripe
  - name: Agent - Pay
    description: 'Agent-wide payout feed: money MOGL sends the agent through Stripe Express'
  - name: Agent - Contracts
    description: Agent athlete contract management
  - name: Agent - Availability Confirmation
    description: Agent managing athlete job availability
  - name: Agent - Roster Import
    description: >-
      CSV client list import through CSVBox (ENG-1619 / ENG-1702): session,
      CSVBox webhook, progress, row results, retry
  - name: Agent - Roster Pages
    description: >-
      ENG-1685: My Roster Link, public roster directory, public roster page, and
      roster SEO URL resolution. A roster is the agent's current linked
      athletes; nothing is stored separately.
  - name: Jobs
    description: Job/deal CRUD, search, invitations, hiring, deliverables
  - name: Deals
    description: Deal listing, my deals, bulk operations
  - name: Deal Folder
    description: >-
      Deal folder file workflow — uploads, replacements, approvals, revisions,
      comments. Accessible by athlete, partner/brand, agent, and iOS clients
      (per-action authorisation enforced server-side).
  - name: Deal Folder iOS API
    description: >-
      iOS-only direct-to-S3 multipart upload endpoints for deal folder files
      (initiate/complete for new uploads and replacements). Web clients should
      use the standard `Deal Folder` upload/replace endpoints instead.
  - name: Chat
    description: Messaging, chat contacts, notifications
  - name: Notifications
    description: Notification preferences, in-app notifications
  - name: Payments
    description: Stripe payments, payment history, cards, bulk pay
  - name: Subscription
    description: Brand subscription plans & management
  - name: Public Pages
    description: Public content endpoints (no auth required)
  - name: Public - Influencer/SEO
    description: Public influencer discovery, sitemaps, directories
  - name: Services
    description: Athlete service marketplace
  - name: iOS Device
    description: iOS device tokens, live activities
  - name: Onboarding Tutorial
    description: Onboarding tutorial progress
  - name: MOGL Rosters
    description: Roster management & display
  - name: Internal / Cron
    description: Server-to-server and cron job endpoints
  - name: Internal / AI Assistant Tools
    description: >-
      Server-to-server Athlete Assistant tool gateway used by mogl-ai-service.
      Eight Laravel tools share POST /internal/ai-assistant/tools/{tool}.
      search_kb is Python-local and is not in this path enum.
  - name: Internal / QA Scenario Lab
    description: >-
      Feature-flagged DEV/STAGING-only endpoints called by the authorized Back
      Office QA Scenario Lab.
  - name: Affiliate
    description: Athlete affiliate links & tracking
  - name: Internal
    description: Internal
  - name: Public - Social Linking
    description: Public - Social Linking
paths:
  /agent/athletes/{athleteId}/w9:
    post:
      tags:
        - Agent - Athletes
      summary: Submit the agent's agency W-9 from a represented athlete
      description: >-
        Submits the agent's agency W-9 so athletes on the roster can apply
        without linking Stripe or PayPal (ENG-1482, ENG-1644, ENG-1650). The
        document belongs to the agent and covers every current and future
        athlete on the roster; `athleteId` is only the row it was uploaded from
        and must be represented. A MOGL employee reviews it once in Back Office
        and the decision applies to the whole roster. Only the agent's latest
        W-9 counts, and only once approved: a new upload from any row is pending
        until reviewed, so it replaces an earlier approval for the whole roster
        until Back Office approves it. Re-upload is always allowed: a rejected
        document has to be replaced, and an approved one can be superseded when
        the agency's details change. The new submission becomes the latest and
        is reviewed on its own merits. Documents are stored privately because
        they carry a taxpayer identification number, and are never reachable by
        URL.
             *
             * Every successful submission, re-uploads included, posts one alert to the W-9 review Slack channel with the agent's name, email and Back Office link (ENG-1666). Back Office can review it from the agent's view or from any athlete on the roster, and a rejection carries a reviewer note (ENG-1668).
             *
             * PDF, JPG and PNG are accepted, up to 25 MB. Back Office previews all three natively: PDFs in its embedded viewer, JPG and PNG as images.
      operationId: agentUploadAthleteW9
      parameters:
        - name: athleteId
          in: path
          description: Athlete user id. Must be on the authenticated agent's roster.
          required: true
          schema:
            type: integer
            example: 28550
      requestBody:
        required: true
        content:
          multipart/form-data:
            schema:
              required:
                - file
              properties:
                file:
                  description: W-9 document. PDF, JPG or PNG, max 25600 KB (25 MB).
                  type: string
                  format: binary
              type: object
      responses:
        '200':
          description: Submitted for review
          content:
            application/json:
              schema:
                properties:
                  message:
                    type: string
                    example: W-9 submitted for review.
                  data:
                    properties:
                      id:
                        type: integer
                        example: 14
                      status:
                        type: string
                        enum:
                          - P
                        example: P
                      rejection_reason:
                        type: string
                        example: null
                        nullable: true
                      created_at:
                        type: string
                        format: date-time
                        example: '2026-09-22 10:31:04'
                        nullable: true
                    type: object
                type: object
        '400':
          description: The agent is not approved, or does not represent this athlete.
          content:
            application/json:
              schema:
                properties:
                  message:
                    type: string
                    example: You can only manage athletes you represent.
                  error_code:
                    type: string
                    enum:
                      - AGENT_NOT_APPROVED
                      - ATHLETE_NOT_LINKED
                    example: ATHLETE_NOT_LINKED
                type: object
        '422':
          description: The document failed validation.
          content:
            application/json:
              schema:
                properties:
                  message:
                    type: string
                    example: 'The file must be a file of type: pdf, jpeg, jpg, png.'
                  errors:
                    properties:
                      file:
                        type: array
                        items:
                          type: string
                    type: object
                type: object
      security:
        - bearerAuth: []
components:
  securitySchemes:
    bearerAuth:
      type: http
      description: >-
        JWT Bearer token authentication. Use the /api/login endpoint to obtain a
        token.
      scheme: bearer
      bearerFormat: JWT

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.