Create Embedded Account
Authentication
The API key of the merchant - see https://docs.coinflow.cash/api-reference/api-reference/authentication/get-session-key
Request
Response
Per-customer exemption from real-time geographic enforcement.
When set and not expired, withdrawal blocking rules with method
GEOLOCATION or IP are skipped for this withdrawer. KYC_ADDRESS rules
still apply — KYC is the compliance floor and must remain enforceable.
Auditable by construction: reason and setBy are required so admins can
review why a specific user was exempted. expiresAt is optional but
strongly recommended; long-lived overrides should be avoided.
When true, this withdrawer is exempt from the merchant
banDuplicateAccounts re-use check, so it may add an account that another
withdrawer already uses without being blocked (423 PAYMENT_METHOD_IN_USE).

