---
title: "Payment Challenge"
method: GET
path: "/api/v1/embedded/payment/challenge"
tags: ["Embedded Checkout"]
---

# Payment Challenge

`GET /api/v1/embedded/payment/challenge`

## Request

- Base URL: `https://api.paylox.io`
- URL: `https://api.paylox.io/api/v1/embedded/payment/challenge`
- Auth: none declared
- TypeScript: <https://skmtc.dev/jetcheckout/apis/jet-checkout/docs/api/v1/embedded/payment/challenge/get.ts> (a function with typed inputs; its response is checked against the schema)

Recover an existing unopened PSP 3DS action for the canonical session order. Requires the exact activated X-Browser-Token. Never submits another payment or initializes the PSP. Missing, consumed or expired actions are unavailable. Opening the returned URL remains subject to the existing one-use redirect guard.

## Query parameters

- `session_id` string, required
- `order_id` string, required

## Headers

- `x-browser-token` string

## Response `200`

Successful Response

- PspChallengeRecoveryResponse
  - `status` integer
  - `available` boolean
  - `retry_payment` false
  - `order_id` string
  - `transaction_id` string
  - `next_action` PspChallengeAction
    - `type` 'three_ds_redirect', required
    - `url` string, required

## Other responses

- `422`: Validation Error

## Changes

- **2026-10-10** `44bbffd60bd6`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/jetcheckout/apis/jet-checkout/changes/api/v1/embedded/payment/challenge/get.md)

---

[API](https://skmtc.dev/jetcheckout/apis/jet-checkout.md) - [All operations](https://skmtc.dev/jetcheckout/apis/jet-checkout/llms.txt) - [OpenAPI document](https://skmtc.dev/jetcheckout/apis/jet-checkout/revisions/06cdc5bbb97f?raw)