Read one order
The order's record: the cart as it was, the total, the payment provider's own session id, and whether the provider has reported it settled. An order on another shopkeeper's shop returns the same 404 as one that does not exist.
The order's record: the cart as it was, the total, the payment provider's own session id, and whether the provider has reported it settled. An order on another shopkeeper's shop returns the same 404 as one that does not exist.
Authorization
bearerAuth A bearer token. The Account routes accept a Privy access token; the MCP transport accepts an sk- API key issued by POST /account/api-keys.
In: header
Path Parameters
The checkout's id.
Response Body
application/json
application/json
application/json
curl -X GET "https://example.com/business/checkouts/string"{ "id": "string", "method": "card", "stablecoin": "string", "lines": [ { "productId": "string", "name": "string", "quantity": 1, "unitPriceUsd": "string" } ], "totalUsd": "string", "providerSessionId": "string", "checkoutUrl": "http://example.com", "state": "open", "createdAt": "2019-08-24T14:15:22Z", "updatedAt": "2019-08-24T14:15:22Z"}List a shop's orders GET
Every order a customer opened against this shop, newest first. An order is recorded when the checkout is opened and marked `paid` only when the provider reports the session settled — putty never marks one paid on its own.
Open a checkout POST
Opens a payment for a cart and answers with where to send the customer. **The response shape is identical for both methods:** `checkoutUrl` is the link the storefront's Pay button points at, whether the shopper pays by card or in USDC or USDG. **The customer completes the payment on the payment provider's own page.** putty never takes custody of the money: it never sees a card number, never holds a stablecoin, and never asks for a seed phrase. The stablecoin page shows an amount and a QR code — no wallet prompt, no token ticker the customer did not choose. `successUrl` and `cancelUrl` must be absolute https URLs on the shop's own host, and default to the shop's `/thanks` and `/cart` when omitted. A checkout that returns a customer somewhere else is telling them not to trust the payment, so it is refused. An order is recorded before the response is written, so a customer who sees a link always has an order behind it. A cart the provider refuses gets a 409 with every problem in `error.problems` and no checkout is opened.