Open a payment capture link
Exchange a capture-link token issued by the add_payment_authority task. No API key or session applies — the single-use token (valid 30 minutes, one verified card capture) is the authorization; the hosted capture page calls this on the cardholder’s behalf. Marks the link opened and returns the org display name plus the embedded card form’s client secret and publishable key while the link is still capturable; once verified or expired it returns the status alone. Pass view=status for a cheap status-only poll that opens nothing. Unknown or malformed tokens return a bare 404/400 with no organization information. Requests are IP rate-limited.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
The single-use capture-link token from the URL issued by add_payment_authority. The token is the authorization — no session or API key applies.
^[A-Za-z0-9_-]{40,64}$Query Parameters
Pass status for the cheap status-only poll: returns status and expiry without opening the link or minting card-form credentials.
status Response
Open a payment capture link
Validates the capture-link token, marks it opened, and returns everything the hosted page needs to mount the embedded card form (or render the current status if already verified/expired).
pending: issued, not yet opened. opened: the hosted page exchanged the token at least once. verified: the card-rail webhook confirmed a payment method for this link. expired: the TTL elapsed before verification — terminal, never re-armed.
pending, opened, verified, expired ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$The requesting org's display name, shown so the cardholder knows whose payment method they're adding. Omitted from the status-only poll view.
The capture-session client secret for the embedded card form. Present only while status is pending or opened.