Creates or replays an expiring account-level pending checkout and
returns a provider-hosted URL. No usable Workspace exists yet. Only a
signature-verified provider event followed by subscription
reconciliation may activate the Workspace; browser return is
navigation only.
Header Parameters
X-CSRF-TokenRequired
string·min 43·max 43
Session-bound CSRF token. It must exactly match the
__Host-assign_csrf cookie sent with the request.
Idempotency-KeyRequired
string·min 16·max 200
Opaque client-generated key for safely retrying this operation.
Request Body
application/json
nameRequired
string·min 1·max 100
slug
string·min 1·max 63
quote_idRequired
string·min 1·max 255
Responses
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
idRequired
string <uuid>
Opaque Assign-owned UUIDv7 identifier. Clients must not derive meaning from it.
Example0198ac5e-f9b7-7000-8000-000000000001
stateRequired
string
Values
pendingactivatingactivatedexpiredcanceled
expires_atRequired
string <date-time>
url
string <uri>·max 2048
workspace
object
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Request-ID
string·min 1·max 200
Correlation identifier for the request.
X-Content-Type-Options
string·const nosniff
Prevents user agents from MIME-sniffing the response.
errorRequired
object
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Request-ID
string·min 1·max 200
Correlation identifier for the request.
X-Content-Type-Options
string·const nosniff
Prevents user agents from MIME-sniffing the response.
errorRequired
object
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Request-ID
string·min 1·max 200
Correlation identifier for the request.
X-Content-Type-Options
string·const nosniff
Prevents user agents from MIME-sniffing the response.
errorRequired
object
Retry-After
integer·min 0
Delay in seconds before retrying, when an expected maintenance end is known.
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Request-ID
string·min 1·max 200
Correlation identifier for the request.
X-Content-Type-Options
string·const nosniff
Prevents user agents from MIME-sniffing the response.
