---
title: "Create a Stripe Customer Portal session"
method: POST
path: "/api/billing/portal"
tags: ["Billing"]
---

# Create a Stripe Customer Portal session

`POST /api/billing/portal`

## Request

- Base URL: `https://api.setluca.com`
- URL: `https://api.setluca.com/api/billing/portal`
- Auth: API key in cookie `luca.session_token`

Returns a Stripe Customer Portal URL where the coach handles payment methods, invoices, and cancellation. The return URL is forced back to the app origin.

**Session-only.** This endpoint isn't on the API-key allowlist. An organization API key gets a 403 here, whatever scopes it holds.

## Headers

- `Luca-API-Version` '1'

## Request body

- PortalBody
  - `returnUrl` string, uri

## Response `200`

ok

- BillingPortalResponse
  - `url` string, required

## Other responses

- `400`: bad request
- `401`: unauthorized
- `404`: not found
- `429`: rate limited
- `500`: internal error
- `502`: upstream failure
- `503`: service unavailable

---

[API](https://skmtc.dev/setluca/apis/luca-api.md) · [All operations](https://skmtc.dev/setluca/apis/luca-api/llms.txt) · [OpenAPI document](https://skmtc.dev/setluca/apis/luca-api/revisions/90a200e4100b?raw)