Endpoint

List checkout sessions

GET/v1/checkout_sessions

Returns your checkout sessions, newest first, a page at a time. Filter by status, order, customer or client_reference_id, and by the time each was made, with created[gte] and created[lt].

Scope a restricted key needs: checkout_sessions:read
Publishable key: Not allowed: secret or restricted key only
Idempotency-Key: Not used. A GET is already safe to repeat.

Parameters

Parameters of List checkout sessions
Parameter	Type and place	Meaning
`status`	stringquery	Filter by state. One of `open`, `completed`, `expired`.
`order`	stringquery	Sessions of one order.
`customer`	stringquery	Sessions of one customer.
`client_reference_id`	stringquery	Exact match.
`limit`	integerquery	Items per page, 1 to 100. Default 20.
`starting_after`	stringquery	An object id: return the items after it.
`ending_before`	stringquery	An object id: return the items before it.
`created[gte]`	string (date-time)query	Created at or after. Also created[gt], created[lte], created[lt].
`created[lt]`	string (date-time)query	Created before.
`expand`	stringquery	Comma-separated fields to expand (Filtering, sorting and expanding), up to 5, one level deep: `data.order`, `data.customer`. Each field needs the read scope that its object's own GET needs (`customers:read` for a customer, `payments:read` for a payment); without it the call answers `insufficient_scope` naming that scope, and nothing is expanded.
`Orrerie-Version`	stringheader	API version date. Default: the version the key was created with. Example `2026-10-11`.

Example request

curl

curl https://api.orrerie.com/v1/checkout_sessions \
  -H "Authorization: Bearer $ORRERIE_SECRET_KEY"

JavaScript

const response = await fetch("https://api.orrerie.com/v1/checkout_sessions", {
  headers: {
    Authorization: `Bearer ${process.env.ORRERIE_SECRET_KEY}`,
  },
});
const result = await response.json();
if (!response.ok) throw new Error(`${result.error.code}: ${result.error.message}`);
console.log(result);

Python

import os
import requests

response = requests.get(
    "https://api.orrerie.com/v1/checkout_sessions",
    headers={"Authorization": f"Bearer {os.environ['ORRERIE_SECRET_KEY']}"},
    timeout=30,
)
result = response.json()
if not response.ok:
    raise RuntimeError(f"{result['error']['code']}: {result['error']['message']}")
print(result)

PHP

<?php
$request = curl_init('https://api.orrerie.com/v1/checkout_sessions');
curl_setopt_array($request, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . getenv('ORRERIE_SECRET_KEY'),
    ],
]);
$body = curl_exec($request);
if ($body === false) {
    throw new RuntimeException(curl_error($request));
}
$result = json_decode($body, true);
if (curl_getinfo($request, CURLINFO_HTTP_CODE) >= 400) {
    throw new RuntimeException($result['error']['code'] . ': ' . $result['error']['message']);
}
print_r($result);

Responses

`200` OK

A list whose data holds checkout_session objects. Headers: Orrerie-Request-Id.

Example response, 200

{
  "object": "list",
  "url": "/v1/checkout_sessions",
  "has_more": false,
  "data": [
    {
      "id": "cs_z7ek5wj68fyz80j7bz1eq4e0",
      "object": "checkout_session",
      "livemode": true,
      "created": "2026-10-11T14:03:22.418Z",
      "status": "open",
      "mode": "payment",
      "order": "ord_0zymngngvf12b8b2cra7tb8e",
      "url": "https://pay.orrerie.com/c/cs_z7ek5wj68fyz80j7bz1eq4e0",
      "app_url": "https://pay.orrerie.com/o/cs_z7ek5wj68fyz80j7bz1eq4e0",
      "success_url": "https://acme.example/thanks?session={CHECKOUT_SESSION_ID}",
      "cancel_url": "https://acme.example/cart",
      "customer": "cus_8ea07c40qsvv19f7rgmeb8ha",
      "customer_email": "jane@example.com",
      "client_reference_id": "1042",
      "collect": {
        "email": "required",
        "name": "optional",
        "shipping_address": "hidden"
      },
      "collected": {
        "email": null,
        "name": null,
        "shipping_address": null
      },
      "locale": "auto",
      "subscription": null,
      "expires_at": "2026-10-11T15:03:22.418Z",
      "completed_at": null,
      "metadata": {
        "cart_id": "c_7781"
      }
    }
  ]
}

Any other status: an error

A status of 400 or above answers with the error object. Branch on its code, never on its message.

Errors

This call has no error of its own. It answers with the errors every call can answer with: a bad key, a missing scope, an object that does not exist, the rate limit. Every error code has its own entry.