POST https://api.uip.digital/v1/sessions · Auth: Bearer API keyHeaders
Bearer YOUR_API_KEYOptional. A repeat create with the same key returns the original session instead of
creating a duplicate.
Body
Ordered steps to verify. Each has a
primitive, optional params, and optional
gate.Your own identifier, echoed on every webhook and stamped into the audit record.
Up to 50 string-valued keys. Operational only (webhooks + reads); never shown to
the user.
An
https URL. Renders a “Return to ” button on the hosted page after the
flow completes (never an automatic redirect).Session TTL in seconds (60–86400). Defaults to the standard cap.
Response
The session id, e.g.
sess_abc123.created.The hosted page URL to hand the user.
ISO 8601 expiry timestamp.
Errors
400 invalid steps[] / unknown primitive / bad params · 401 bad key ·
402 insufficient balance · 422 no webhook configured · 409 idempotency
conflict. See Errors.