> ## Documentation Index
> Fetch the complete documentation index at: https://tapcoupon.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Create payment session

> Create a partner session with a 32-character token and a five-minute completion window.

## POST `/payment-sessions`

Create a partner session with a 32-character token and a five-minute completion window.

This endpoint is public. You do not need an API key or employee token.

Supported types are `coupon`, `loyalty`, `status`, and `points`. These values differ from card response values such as `couponCard`.

Open `tapcoupon://complete-session?token=YOUR_SESSION_TOKEN` on the device running TapCoupon. The employee chooses the amount or points and completes the operation. The create request does not set an amount. Rate limit: 30 requests per minute per IP.

### Example request

```bash theme={null}
curl -X POST "https://tapcoupon.at/api/v1/payment-sessions" \
  -H "Content-Type: application/json" \
  -d '{
  "appName": "Your POS",
  "callbackUrl": "yourpos://payment-complete",
  "supportedCardTypes": [
    "coupon",
    "loyalty",
    "status",
    "points"
  ]
}'
```

### Example response

```json theme={null}
{
  "token": "a3f9kqzm8bnwvrtd2xeljcuy4osp1gh7"
}
```


## OpenAPI

````yaml api-reference/openapi.json POST /payment-sessions
openapi: 3.1.0
info:
  title: TapCoupon POS and partner API
  version: 1.0.0
  description: >-
    API-key POS operations, customer card views, and partner payment sessions.
    Verified against the tap_coupon backend on 2026-10-02. Dashboard /clients
    and administrative routes use separate authentication and are outside this
    reference.
servers:
  - url: https://tapcoupon.at/api/v1
security: []
paths:
  /payment-sessions:
    post:
      tags:
        - Integration
      summary: Create payment session
      description: >-
        Create a partner session with a 32-character token and a five-minute
        completion window.
      operationId: integration_create_session
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SessionCreate'
            example:
              appName: Your POS
              callbackUrl: yourpos://payment-complete
              supportedCardTypes:
                - coupon
                - loyalty
                - status
                - points
      responses:
        '201':
          description: Success
          content:
            application/json:
              schema:
                type: object
                properties:
                  token:
                    type: string
                    minLength: 32
                    maxLength: 32
                required:
                  - token
              example:
                token: a3f9kqzm8bnwvrtd2xeljcuy4osp1gh7
        '400':
          description: Invalid request, card type, balance, points, or location.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: >-
            Rate limit exceeded. The response body is determined by the
            rate-limit middleware.
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security: []
components:
  schemas:
    SessionCreate:
      type: object
      properties:
        appName:
          type: string
          maxLength: 100
        callbackUrl:
          type: string
          maxLength: 500
        supportedCardTypes:
          type: array
          items:
            type: string
            enum:
              - coupon
              - loyalty
              - status
              - points
          minItems: 1
      required:
        - appName
        - callbackUrl
        - supportedCardTypes
    Error:
      type: object
      properties:
        error:
          type: string
          description: Human-readable error.
        errorCode:
          type: string
          description: >-
            Handler errors include a machine-readable code; middleware errors
            may omit it.
      required:
        - error

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.