Hosted sessions
A single-use token minted by your server and exchanged exactly once by the hosted screen. No redirect URL, and the browser never carries the amount.
| Call | Page | What it does |
|---|---|---|
POST hosted-session-create | sessions/create | Your server mints the single-use token |
POST hosted-session-consume | sessions/consume | The hosted screen exchanges it, once, atomically |
Branding comes from merchant-theme-get, not from the session. Hosted sessions emit no webhooks.
Sidaxis is the human authorisation layer. It never moves money, holds funds or settles. The machine-readable contract is openapi.yaml.