---
title: "Create Card Check Session"
method: POST
path: "/api/v1/billing/card-check-sessions"
tags: ["authed"]
---

# Create Card Check Session

`POST /api/v1/billing/card-check-sessions`

## Request

- Base URL: `https://api.teaflask.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.teaflask.com/api/v1/billing/card-check-sessions`
- Auth: none declared

One hosted Checkout page for the $0 card check that unlocks the
welcome credit. Nothing is charged; the grant lands through the
webhook when the setup intent succeeds. Pointless once unlocked or
forfeited (the card claim is never released), so both read as a 409
rather than a Checkout that can only refuse.

## Request body

- CreateCardCheckSessionRequest
  - `return_to` 'billing' | 'welcome', required

## Response `200`

Successful Response

- CardCheckSessionResponse
  - `checkout_url` string, required

## Other responses

- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not found
- `405`: Method not allowed
- `422`: Validation error
- `500`: Internal server error

## Changes

- **2026-11-03** `c6ac9fd6657f`: 6 info
  - removed the `STEEP_LEARNING_DISABLED` enum value from the `error/code` response property for the response status `401`
  - removed the `STEEP_LEARNING_DISABLED` enum value from the `error/code` response property for the response status `403`
  - removed the `STEEP_LEARNING_DISABLED` enum value from the `error/code` response property for the response status `404`
  - removed the `STEEP_LEARNING_DISABLED` enum value from the `error/code` response property for the response status `405`
  - …2 more

[Operation history](https://skmtc.dev/teaflask/apis/teaflask-api/changes/api/v1/billing/card-check-sessions/post.md)

---

[API](https://skmtc.dev/teaflask/apis/teaflask-api.md) - [All operations](https://skmtc.dev/teaflask/apis/teaflask-api/llms.txt) - [OpenAPI document](https://skmtc.dev/teaflask/apis/teaflask-api/revisions/c6ac9fd6657f?raw)