Create a hosted payment page payment

curl --request POST \
  --url https://api.flowlix.eu/v1/payments/hpp \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "amount": 2500,
  "currency": "EUR",
  "merchant_reference": 2345678901,
  "customer_ip_address": "203.0.113.7",
  "merchant_customer_id": "cust_opaque_42",
  "billing_details": {
    "email": "jenny@example.com",
    "first_name": "Jenny",
    "last_name": "Rosen",
    "phone": "+491701234567",
    "address": {
      "line1": "Kurfuerstendamm 21",
      "city": "Berlin",
      "postal_code": "10719",
      "country": "DE"
    }
  },
  "return_url": "https://shop.example.com/checkout/complete"
}
'

import requests

url = "https://api.flowlix.eu/v1/payments/hpp"

payload = {
    "amount": 2500,
    "currency": "EUR",
    "merchant_reference": 2345678901,
    "customer_ip_address": "203.0.113.7",
    "merchant_customer_id": "cust_opaque_42",
    "billing_details": {
        "email": "jenny@example.com",
        "first_name": "Jenny",
        "last_name": "Rosen",
        "phone": "+491701234567",
        "address": {
            "line1": "Kurfuerstendamm 21",
            "city": "Berlin",
            "postal_code": "10719",
            "country": "DE"
        }
    },
    "return_url": "https://shop.example.com/checkout/complete"
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    amount: 2500,
    currency: 'EUR',
    merchant_reference: 2345678901,
    customer_ip_address: '203.0.113.7',
    merchant_customer_id: 'cust_opaque_42',
    billing_details: {
      email: 'jenny@example.com',
      first_name: 'Jenny',
      last_name: 'Rosen',
      phone: '+491701234567',
      address: {
        line1: 'Kurfuerstendamm 21',
        city: 'Berlin',
        postal_code: '10719',
        country: 'DE'
      }
    },
    return_url: 'https://shop.example.com/checkout/complete'
  })
};

fetch('https://api.flowlix.eu/v1/payments/hpp', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.flowlix.eu/v1/payments/hpp",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'amount' => 2500,
    'currency' => 'EUR',
    'merchant_reference' => 2345678901,
    'customer_ip_address' => '203.0.113.7',
    'merchant_customer_id' => 'cust_opaque_42',
    'billing_details' => [
        'email' => 'jenny@example.com',
        'first_name' => 'Jenny',
        'last_name' => 'Rosen',
        'phone' => '+491701234567',
        'address' => [
                'line1' => 'Kurfuerstendamm 21',
                'city' => 'Berlin',
                'postal_code' => '10719',
                'country' => 'DE'
        ]
    ],
    'return_url' => 'https://shop.example.com/checkout/complete'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.flowlix.eu/v1/payments/hpp"

	payload := strings.NewReader("{\n  \"amount\": 2500,\n  \"currency\": \"EUR\",\n  \"merchant_reference\": 2345678901,\n  \"customer_ip_address\": \"203.0.113.7\",\n  \"merchant_customer_id\": \"cust_opaque_42\",\n  \"billing_details\": {\n    \"email\": \"jenny@example.com\",\n    \"first_name\": \"Jenny\",\n    \"last_name\": \"Rosen\",\n    \"phone\": \"+491701234567\",\n    \"address\": {\n      \"line1\": \"Kurfuerstendamm 21\",\n      \"city\": \"Berlin\",\n      \"postal_code\": \"10719\",\n      \"country\": \"DE\"\n    }\n  },\n  \"return_url\": \"https://shop.example.com/checkout/complete\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Idempotency-Key", "<idempotency-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.flowlix.eu/v1/payments/hpp")
  .header("Idempotency-Key", "<idempotency-key>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"amount\": 2500,\n  \"currency\": \"EUR\",\n  \"merchant_reference\": 2345678901,\n  \"customer_ip_address\": \"203.0.113.7\",\n  \"merchant_customer_id\": \"cust_opaque_42\",\n  \"billing_details\": {\n    \"email\": \"jenny@example.com\",\n    \"first_name\": \"Jenny\",\n    \"last_name\": \"Rosen\",\n    \"phone\": \"+491701234567\",\n    \"address\": {\n      \"line1\": \"Kurfuerstendamm 21\",\n      \"city\": \"Berlin\",\n      \"postal_code\": \"10719\",\n      \"country\": \"DE\"\n    }\n  },\n  \"return_url\": \"https://shop.example.com/checkout/complete\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.flowlix.eu/v1/payments/hpp")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Idempotency-Key"] = '<idempotency-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"amount\": 2500,\n  \"currency\": \"EUR\",\n  \"merchant_reference\": 2345678901,\n  \"customer_ip_address\": \"203.0.113.7\",\n  \"merchant_customer_id\": \"cust_opaque_42\",\n  \"billing_details\": {\n    \"email\": \"jenny@example.com\",\n    \"first_name\": \"Jenny\",\n    \"last_name\": \"Rosen\",\n    \"phone\": \"+491701234567\",\n    \"address\": {\n      \"line1\": \"Kurfuerstendamm 21\",\n      \"city\": \"Berlin\",\n      \"postal_code\": \"10719\",\n      \"country\": \"DE\"\n    }\n  },\n  \"return_url\": \"https://shop.example.com/checkout/complete\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "pay_v2Pr7Su3Aw9Cy1De4Fg8Hi0K",
  "amount": 2500,
  "currency": "EUR",
  "status": "PENDING",
  "integration_type": "HOSTED_PAYMENT_PAGE",
  "payment_method": null,
  "merchant_reference": 2345678901,
  "description": "Order #5678",
  "amount_refunded": 0,
  "amount_refundable": 0,
  "refunds": [],
  "created_at": 1719792000,
  "livemode": false
}

Payments

Create a hosted payment page payment

Creates a hosted payment page payment attempt. Redirect the customer to next_action.redirect_url to complete the next_action.reason customer action. The required-action URL is opaque and may later change from the hosted page to a 3D Secure browser action. Use the latest next_action.redirect_url from GET /v1/payments/{id}, and avoid redirect loops when the URL is unchanged.

Optional billing_details are supplied by the merchant and forwarded for the payment. The hosted card-entry page does not let shoppers edit these billing details. The editable cardholder-name field is separate from the billing profile.

return_url is an absolute HTTPS merchant URL with a valid hostname or IP address, where the customer is sent after completing or abandoning the hosted payment page. HTTP and other schemes are rejected before Payment creation. Host validation checks syntax; no domain allowlist or DNS lookup is applied. Return URL query parameters are UX hints only; merchants must use GET /v1/payments/{id} as the source of truth.

New hosted-page Payments require one of the supported payment currencies. A well-formed unsupported currency returns 422 currency_not_supported without creating a Payment. Existing Payments in other currencies remain readable.

Use the Idempotency-Key header to safely retry requests.

POST

payments

hpp

Create a hosted payment page payment

curl --request POST \
  --url https://api.flowlix.eu/v1/payments/hpp \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "amount": 2500,
  "currency": "EUR",
  "merchant_reference": 2345678901,
  "customer_ip_address": "203.0.113.7",
  "merchant_customer_id": "cust_opaque_42",
  "billing_details": {
    "email": "jenny@example.com",
    "first_name": "Jenny",
    "last_name": "Rosen",
    "phone": "+491701234567",
    "address": {
      "line1": "Kurfuerstendamm 21",
      "city": "Berlin",
      "postal_code": "10719",
      "country": "DE"
    }
  },
  "return_url": "https://shop.example.com/checkout/complete"
}
'

import requests

url = "https://api.flowlix.eu/v1/payments/hpp"

payload = {
    "amount": 2500,
    "currency": "EUR",
    "merchant_reference": 2345678901,
    "customer_ip_address": "203.0.113.7",
    "merchant_customer_id": "cust_opaque_42",
    "billing_details": {
        "email": "jenny@example.com",
        "first_name": "Jenny",
        "last_name": "Rosen",
        "phone": "+491701234567",
        "address": {
            "line1": "Kurfuerstendamm 21",
            "city": "Berlin",
            "postal_code": "10719",
            "country": "DE"
        }
    },
    "return_url": "https://shop.example.com/checkout/complete"
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    amount: 2500,
    currency: 'EUR',
    merchant_reference: 2345678901,
    customer_ip_address: '203.0.113.7',
    merchant_customer_id: 'cust_opaque_42',
    billing_details: {
      email: 'jenny@example.com',
      first_name: 'Jenny',
      last_name: 'Rosen',
      phone: '+491701234567',
      address: {
        line1: 'Kurfuerstendamm 21',
        city: 'Berlin',
        postal_code: '10719',
        country: 'DE'
      }
    },
    return_url: 'https://shop.example.com/checkout/complete'
  })
};

fetch('https://api.flowlix.eu/v1/payments/hpp', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.flowlix.eu/v1/payments/hpp",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'amount' => 2500,
    'currency' => 'EUR',
    'merchant_reference' => 2345678901,
    'customer_ip_address' => '203.0.113.7',
    'merchant_customer_id' => 'cust_opaque_42',
    'billing_details' => [
        'email' => 'jenny@example.com',
        'first_name' => 'Jenny',
        'last_name' => 'Rosen',
        'phone' => '+491701234567',
        'address' => [
                'line1' => 'Kurfuerstendamm 21',
                'city' => 'Berlin',
                'postal_code' => '10719',
                'country' => 'DE'
        ]
    ],
    'return_url' => 'https://shop.example.com/checkout/complete'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.flowlix.eu/v1/payments/hpp"

	payload := strings.NewReader("{\n  \"amount\": 2500,\n  \"currency\": \"EUR\",\n  \"merchant_reference\": 2345678901,\n  \"customer_ip_address\": \"203.0.113.7\",\n  \"merchant_customer_id\": \"cust_opaque_42\",\n  \"billing_details\": {\n    \"email\": \"jenny@example.com\",\n    \"first_name\": \"Jenny\",\n    \"last_name\": \"Rosen\",\n    \"phone\": \"+491701234567\",\n    \"address\": {\n      \"line1\": \"Kurfuerstendamm 21\",\n      \"city\": \"Berlin\",\n      \"postal_code\": \"10719\",\n      \"country\": \"DE\"\n    }\n  },\n  \"return_url\": \"https://shop.example.com/checkout/complete\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Idempotency-Key", "<idempotency-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.flowlix.eu/v1/payments/hpp")
  .header("Idempotency-Key", "<idempotency-key>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"amount\": 2500,\n  \"currency\": \"EUR\",\n  \"merchant_reference\": 2345678901,\n  \"customer_ip_address\": \"203.0.113.7\",\n  \"merchant_customer_id\": \"cust_opaque_42\",\n  \"billing_details\": {\n    \"email\": \"jenny@example.com\",\n    \"first_name\": \"Jenny\",\n    \"last_name\": \"Rosen\",\n    \"phone\": \"+491701234567\",\n    \"address\": {\n      \"line1\": \"Kurfuerstendamm 21\",\n      \"city\": \"Berlin\",\n      \"postal_code\": \"10719\",\n      \"country\": \"DE\"\n    }\n  },\n  \"return_url\": \"https://shop.example.com/checkout/complete\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.flowlix.eu/v1/payments/hpp")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Idempotency-Key"] = '<idempotency-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"amount\": 2500,\n  \"currency\": \"EUR\",\n  \"merchant_reference\": 2345678901,\n  \"customer_ip_address\": \"203.0.113.7\",\n  \"merchant_customer_id\": \"cust_opaque_42\",\n  \"billing_details\": {\n    \"email\": \"jenny@example.com\",\n    \"first_name\": \"Jenny\",\n    \"last_name\": \"Rosen\",\n    \"phone\": \"+491701234567\",\n    \"address\": {\n      \"line1\": \"Kurfuerstendamm 21\",\n      \"city\": \"Berlin\",\n      \"postal_code\": \"10719\",\n      \"country\": \"DE\"\n    }\n  },\n  \"return_url\": \"https://shop.example.com/checkout/complete\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "pay_v2Pr7Su3Aw9Cy1De4Fg8Hi0K",
  "amount": 2500,
  "currency": "EUR",
  "status": "PENDING",
  "integration_type": "HOSTED_PAYMENT_PAGE",
  "payment_method": null,
  "merchant_reference": 2345678901,
  "description": "Order #5678",
  "amount_refunded": 0,
  "amount_refundable": 0,
  "refunds": [],
  "created_at": 1719792000,
  "livemode": false
}

Authorizations

Authorization

string

header

required

Use the secret API key for the intended merchant and mode as the Bearer token. Sandbox keys start with api_test_sk_. Send the key only from your server environment.

Authorization: Bearer api_test_sk_abc123def456

Headers

Idempotency-Key

string

required

A unique key to ensure one effective operation is processed only once. If the same key and an equivalent operation-specific effective request identity have already completed successfully, the original response is returned. A different identity returns 409 idempotency_key_reused. Non-2xx responses are not cached, so callers may retry after errors. No fixed retention period is promised by this contract.

For one-shot requests, such as creating a payment from a checkout button, a random UUIDv4 is fine. For requests tied to a specific business operation, such as refunding an order, a deterministic key is preferred so retries collapse correctly across processes.

Maximum string length: 255

Body

application/json

amount

integer<int64>

required

Payment amount in the currency's minor units, using its ISO 4217 exponent. For example, 4999 is EUR 49.99 (exponent 2).

Required range: x >= 1

Example:

2500

currency

string

required

Three-letter ISO 4217 currency code supplied when creating a payment or payout. Accepted case-insensitively and with surrounding whitespace, then normalized to a canonical uppercase code before the operation is created.

A value that is not three letters is rejected with 400 parameter_invalid (param=currency); a well-formed code that Flowlix does not accept for that operation is rejected with 422 currency_not_supported. Neither creates a payment or payout. The available set is validated per request instead of being enumerated here, so enabling another currency is not a breaking contract change. For new Payment eligibility, see the supported payment currencies; Payout eligibility is independent.

Required string length: 3 - 16

Pattern: ^\s*[A-Za-z]{3}\s*$

Example:

"EUR"

customer_ip_address

string

required

Shopper IPv4 or IPv6 address observed by the merchant during checkout. Send one literal address, not a hostname, port, or comma-separated proxy chain. Flowlix validates the complete IPv4 or IPv6 literal before registering the payment; the pattern is only an initial schema-level character and length guard.

Required string length: 3 - 45

Pattern:

^(((25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9]{2}|[1-9]?[0-9])|[0-9A-Fa-f:]*:[0-9A-Fa-f:.]*)$

Example:

"203.0.113.7"

merchant_customer_id

string

required

Stable merchant-scoped non-PII opaque identity. Reuse it for the same logical customer or recognized guest. Do not send an email, phone number, login, name, payment ID, order ID, attempt ID, fresh per-payment UUID, or any other fresh per-payment value. Case and whitespace are significant. The value must contain 1-255 Unicode scalar values, must be nonblank, and U+0000 is forbidden.

Required string length: 1 - 255

Example:

"cust_opaque_42"

return_url

string<uri>

required

Absolute HTTPS merchant URL with a valid hostname or IP address, where the customer returns after hosted payment completion or abandonment. Parsed URIs with a different scheme or no valid host return 400 parameter_invalid with param: return_url before Payment creation. Malformed URI text returns 400 request_body_invalid. Host validation checks syntax, without a domain allowlist or DNS lookup.

Example:

"https://shop.example.com/checkout/complete"

merchant_reference

integer<int64>

Optional merchant-side reconciliation reference. The value must contain exactly 10 decimal digits and does not provide idempotency by itself.

Required range: 1000000000 <= x <= 9999999999

Example:

1234567890

billing_details

object

Optional merchant-supplied payer contact and billing-address details for the payment. These details are not editable on the hosted card-entry page and are separate from the cardholder name.

Show child attributes

description

string | null

Merchant-provided payment description.

Maximum string length: 500

Example:

"Order #5678"

Response

Hosted payment page payment accepted and a Payment object was created. REQUIRES_ACTION includes the hosted redirect; PENDING records an outcome that is not safe to resubmit; and FAILED records a terminal Payment result. A newly created HPP Payment does not return PROCESSING before the first customer redirect. Use GET /v1/payments/{id} as the source of truth for the final outcome.

A Payment represents one attempt to collect funds from the customer. Merchants can use merchant_reference to associate multiple payment attempts with the same order or checkout in their own systems.

string

required

Unique opaque identifier for a payment (pay_ prefix + random alphanumeric suffix).

Pattern: ^pay_[A-Za-z0-9]{24}$

Example:

"pay_q7Mk2Np8Vr4Xt6Yz9Ab3Cd5E"

amount

integer<int64>

required

Payment amount in the currency's minor units, per its ISO 4217 exponent: 4999 is EUR 49.99 but JPY 4999.

Required range: x >= 1

Example:

4999

currency

string

required

Canonical uppercase three-letter ISO 4217 currency code. Responses always return the original currency the payment was created in; a provider response never replaces it.

Required string length: 3

Pattern: ^[A-Z]{3}$

Example:

"EUR"

status

enum<string>

required

Current status of a payment attempt.

PENDING -- The payment was accepted by Flowlix and is awaiting provider submission or the next lifecycle decision.
REQUIRES_ACTION -- Customer action is required, such as completing 3D Secure authentication or a hosted payment page.
PROCESSING -- The payment is being processed by downstream payment systems.
SUCCEEDED -- The payment completed successfully.
FAILED -- The payment was declined or failed permanently.
EXPIRED -- The customer did not complete a required action before its expiry time.

Available options:

PENDING,

REQUIRES_ACTION,

PROCESSING,

SUCCEEDED,

FAILED,

EXPIRED

Example:

"SUCCEEDED"

integration_type

enum<string>

required

How the payment was collected. This is separate from the payment method instrument, such as card.

Available options:

DIRECT,

HOSTED_PAYMENT_PAGE

Example:

"DIRECT"

payment_method

object | null

required

Known submitted direct method or authoritative selected hosted-page method. Null means unknown, not card; the field is always present. This does not imply success. No wallet credentials or authentication payload is returned.

The apple_pay and google_pay values are Experimental: wallet support and this guidance are still being refined and are not final. See wallet contract availability.

Show child attributes

Example:

{
  "type": "apple_pay",
  "card": {
    "brand": "visa",
    "last4": "2207",
    "exp_month": 12,
    "exp_year": 2028
  }
}

amount_refunded

integer<int64>

required

Total amount successfully refunded so far, in the payment currency's minor units, per its ISO 4217 exponent.

Required range: x >= 0

Example:

0

amount_refundable

integer<int64>

required

Remaining amount that can be refunded, in the payment currency's minor units, per its ISO 4217 exponent. This is 0 unless status is SUCCEEDED, because no amount was captured on a payment that has not succeeded. For a SUCCEEDED payment it is the payment amount less anything already refunded or reserved for a refund in flight.

Required range: x >= 0

Example:

4999

created_at

integer<int64>

required

Unix timestamp when the payment was created.

Example:

1719792000

livemode

boolean

required

Always false for a Payment created in Sandbox.

Example:

false

merchant_reference

integer<int64> | null

Merchant-side reconciliation reference, if provided.

Required range: 1000000000 <= x <= 9999999999

Example:

1234567890

description

string | null

Merchant-provided payment description.

Example:

"Order #1234"

billing_details

object | null

Billing details captured for the payment, if available.

Show child attributes

failure_code

enum<string> | null

Machine-readable reason code when the payment reaches a terminal failed status.

Available options:

not_found,

processor_error,

processor_unavailable,

generic_decline,

do_not_honor,

issuer_declined,

insufficient_funds,

invalid_number,

invalid_expiry,

expired_card,

invalid_amount,

invalid_currency,

not_permitted,

cardholder_limit,

card_velocity_exceeded,

lost_card,

stolen_card,

suspect_fraud,

fraud_filter,

three_d_secure_failed,

three_d_secure_timeout,

three_d_secure_not_supported,

three_d_secure_error

Example:

"insufficient_funds"

failure_message

string | null

Human-readable explanation when the payment reaches a terminal failed status.

Example:

"The card has insufficient funds."

refunds

object[]

Refunds created for this payment, oldest first.

Show child attributes

status_transitions

object

Timestamps for important payment status transitions.

Show child attributes

next_action

object | null

Customer action required to continue the payment.

Show child attributes

⌘I

Get started

Build with Flowlix

Handle failures

API reference

Create a hosted payment page payment

Authorizations

Headers

Body

Response