# Hosted sessions

A single-use token minted by your server and exchanged exactly once by the hosted screen. No redirect URL, and the browser never carries the amount.

| Call | Page | What it does |
| --- | --- | --- |
| POST hosted-session-create | sessions/create | Your server mints the single-use token |
| POST hosted-session-consume | sessions/consume | The hosted screen exchanges it, once, atomically |

Branding comes from [merchant-theme-get](/theme), not from the session. Hosted sessions emit no webhooks.