> ## Documentation Index
> Fetch the complete documentation index at: https://tapcoupon.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Get session info

> Retrieve partner session metadata for the TapCoupon app.

## GET `/payment-sessions/{token}/info`

Retrieve partner session metadata for the TapCoupon app.

Send `Authorization: Bearer YOUR_API_KEY` and `X-Device-ID: YOUR_DEVICE_ID`. See [authentication](https://tapcoupon.mintlify.site/authentication.md).

Unlike the public status endpoint, this endpoint requires an API key and device id. It shares the session's two-read budget and rejects expired sessions. It returns metadata for the POS interface, not the completed operation's amount. Missing, expired, or exhausted tokens return `410 PAYMENT_SESSION_UNAVAILABLE`.

This is normally called by TapCoupon when it opens the deep link. Rate limit: 60 requests per minute per IP, in addition to the protected API limit.

### Example request

```bash theme={null}
curl "https://tapcoupon.at/api/v1/payment-sessions/YOUR_SESSION_TOKEN/info" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "X-Device-ID: YOUR_DEVICE_ID"
```

### Example response

```json theme={null}
{
  "appName": "Your POS",
  "callbackUrl": "yourpos://payment-complete",
  "supportedCardTypes": [
    "coupon",
    "loyalty",
    "status",
    "points"
  ],
  "status": "pending",
  "expiresAt": "2026-10-02T12:05:00Z"
}
```


## OpenAPI

````yaml api-reference/openapi.json GET /payment-sessions/{token}/info
openapi: 3.1.0
info:
  title: TapCoupon POS and partner API
  version: 1.0.0
  description: >-
    API-key POS operations, customer card views, and partner payment sessions.
    Verified against the tap_coupon backend on 2026-10-02. Dashboard /clients
    and administrative routes use separate authentication and are outside this
    reference.
servers:
  - url: https://tapcoupon.at/api/v1
security: []
paths:
  /payment-sessions/{token}/info:
    get:
      tags:
        - Integration
      summary: Get session info
      description: Retrieve partner session metadata for the TapCoupon app.
      operationId: integration_get_info
      parameters:
        - name: token
          in: path
          required: true
          description: Secret session token.
          schema:
            type: string
        - name: X-Device-ID
          in: header
          required: true
          description: Stable device identifier. API key binds to this value on first use.
          schema:
            type: string
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SessionInfo'
              example:
                appName: Your POS
                callbackUrl: yourpos://payment-complete
                supportedCardTypes:
                  - coupon
                  - loyalty
                  - status
                  - points
                status: pending
                expiresAt: '2026-10-02T12:05:00Z'
        '401':
          description: >-
            Missing or invalid API key, device id, employee token, or
            credentials.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: >-
            Device binding mismatch, archived location, employee location
            restriction, or account restriction.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '410':
          description: Card archived or payment session unavailable.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: >-
            Rate limit exceeded. The response body is determined by the
            rate-limit middleware.
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
        - bearerAuth: []
components:
  schemas:
    SessionInfo:
      type: object
      properties:
        appName:
          type: string
        callbackUrl:
          type: string
        supportedCardTypes:
          type: array
          items:
            type: string
            enum:
              - coupon
              - loyalty
              - status
              - points
        status:
          type: string
          enum:
            - pending
            - completed
        expiresAt:
          type: string
          format: date-time
    Error:
      type: object
      properties:
        error:
          type: string
          description: Human-readable error.
        errorCode:
          type: string
          description: >-
            Handler errors include a machine-readable code; middleware errors
            may omit it.
      required:
        - error
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: Location API key. Also requires X-Device-ID.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.