API Reference v2
Server-side hosted payment sessions.
Use a project secret key in X-Api-Key only from your server. The key fixes project and Test/Live scope. Management endpoints use JWT Bearer authentication; checkout uses a separate capability. API v2 is independent of webhook protocol v2.
Start with the session contract, checkout boundary, errors and signature verifier. Existing v1 invoices remain documented for legacy integrations.