Checkout Sessions

Create a checkout session for one of the clinic's own programs

Creates the session bookkeeping row for the FUSE-hosted, iframe-isolated intake+checkout component. Computes and stores questionnaireVersionHash (the legal audit trail — sha256 over the program's questionnaire content at creation time) and returns an opaque sessionToken + embedUrl the brand mounts in an iframe. This is the ONE endpoint a PUBLISHABLE key (fuse_pk_…) may call — every other endpoint on this surface, including GET /checkout/sessions/{id}, 403s a publishable key with KEY_KIND_NOT_ALLOWED. Publishable keys are additionally hard rate-limited on this route.

post/api/v1/checkout/sessions

Request

  • Base URL: https://api-dev.fusehealth.com
  • URL: https://api-dev.fusehealth.com/api/v1/checkout/sessions
  • Auth: API key in header x-api-key

Request body

programIdstring uuid required

Must belong to the key's own clinic (404 otherwise).

metadataobject

Brand-supplied data, stored verbatim and capped at 16 KiB (DB CHECK constraint plus model-layer validation). FUSE never displays or acts on it, with one exception: the marketing-attribution keys lead_id (or legacy leadId), utm_source, utm_medium, utm_campaign, utm_content, gclid and fbclid are copied onto the resulting order and echoed on the intake.started webhook. Every other key is ignored.

successUrlunknown

Response

Created

successboolean

Changes

No recorded changes to this operation across all 1 revision of this API.