Skip to main content
POST
Start a card update (Stripe SetupIntent)
Requires a portal session (X-Portal-Session header from magic-link login).
Creates a Stripe SetupIntent and returns the client_secret the Payment Element confirms in the browser. Card data goes browser → Stripe directly — no PAN ever reaches Recurso (PCI SAQ-A preserved). After stripe.confirmSetup, finalize with POST /portal/api/payment-method/confirm. On deployments without Stripe configured this returns 503; UPI-mandate customers should use mandate re-authorization instead.

Example

Authorizations

portal_session
string
cookie
required

Customer-portal session cookie issued by GET /portal/auth/verify.

Response

SetupIntent created.

data
object