Quickstart

This quickstart creates a hosted checkout session from a trusted server and redirects the customer to Zahlo-hosted checkout. The same session contract can be mounted in-page; use Customize checkout when you need that mode.

1. Create a checkout session

Use the merchant API key only from your server:

curl -X POST https://merchant-demo.zahlo.eu/api/v1/checkout-sessions \
  -H 'x-api-key: ${ZAHLO_API_KEY}' \
  -H 'Idempotency-Key: order-1001-checkout' \
  -H 'Content-Type: application/json' \
  -d '{
    "mode": "hosted",
    "amountMinor": 4990,
    "currency": "EUR",
    "paymentMethodTypes": ["card", "bank"],
    "orderId": "order-1001",
    "successUrl": "https://store.example/checkout/success",
    "cancelUrl": "https://store.example/checkout/cancel",
    "metadata": {"orderId": "order-1001"}
  }'

Store the returned session ID and client token on the server-side integration boundary. Do not log the token. The response contains a session ID, a checkout URL, a short-lived client token, status, and expiry. Store the session ID with your order. Return only the URL or browser token needed for the selected integration.

2. Redirect the customer

Redirect to the returned checkoutUrl, or submit the client token to the session redirect endpoint from the checkout page or use the JavaScript SDK. The token is sent in the request body or SDK configuration and never in the URL.

3. Confirm payment

Listen for the signed payment event, verify its signature, deduplicate by event ID, and fulfill only after the event confirms the payment. A browser return is not proof of payment.

4. Test and launch

Use the Testing guide to exercise success, failure, cancellation, expiry, retries, and webhook delivery. When ready, follow Go live to create production credentials and configure allowed origins.

Start here

Core concepts

Accept payments

Sell online

Subscriptions

Integrations

Operations

1. Create a checkout session

2. Redirect the customer

3. Confirm payment

4. Test and launch

​1. Create a checkout session

​2. Redirect the customer

​3. Confirm payment

​4. Test and launch

1. Create a checkout session

2. Redirect the customer

3. Confirm payment

4. Test and launch