---
title: "Create payment gateway session"
method: POST
path: "/api/v1/payment-gateways/{gateway}/session"
tags: ["Payment Gateways"]
---

# Create payment gateway session

`POST /api/v1/payment-gateways/{gateway}/session`

Create a payment gateway session for client-side card tokenization.

Returns short-lived credentials scoped to the authenticated developer.
Use the credentials with the corresponding gateway's client-side SDK to
tokenize a card. Tokens created this way are locked to the developer's
container and cannot be used by other developers.

## Path parameters

- `gateway` 'basis-theory', required

## Response `200`

Gateway-specific session credentials

- PaymentGatewaySession
  - `container` string, required
  - `sessionKey` string, required
  - `gateway` 'basis_theory', required

## Other responses

- `401` — Authentication Failed
- `422` — Validation Error
- `500` — Internal Server Error

## Changes

- **2026-06-08** `0b28c67737d3` — 1 info
  - the security scope `checkout_intents:write` was added to the endpoint's security scheme `bearerAuth`

[Change history](https://skmtc.dev/rye-com/apis/universal-checkout-api/changes/api/v1/payment-gateways/:gateway/session/post.md)

---

[API](https://skmtc.dev/rye-com/apis/universal-checkout-api.md) · [All operations](https://skmtc.dev/rye-com/apis/universal-checkout-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/rye-com/universal-checkout-api/revisions/175c7f9e090e/schema)