POST /v1/billing/payment-methods/setup-intent - SEC API for AI

curl -X POST \
  -H "Authorization: Bearer $SECAPI_BEARER_TOKEN" \
  -H "secapi-version: 2026-03-19" \
  -H "content-type: application/json" \
  -d '{}' \
  "https://api.secapi.ai/v1/billing/payment-methods/setup-intent"

{
  "requestId": "req_2ZK8Q1W9F4M6P7R3"
}

Create a Stripe SetupIntent to save a payment method off-session for top-ups and auto-top-up (max 3 per organization)

Audience: application and coding agent.

Request body

This endpoint accepts no request body fields. Omit the body or send {}; unknown fields return 400 validation_error.

Canonical metadata

requestId
traceparent

Example request

curl -X POST \
  -H "Authorization: Bearer $SECAPI_BEARER_TOKEN" \
  -H "secapi-version: 2026-03-19" \
  -H "content-type: application/json" \
  -d '{}' \
  "https://api.secapi.ai/v1/billing/payment-methods/setup-intent"

Payment-method management requires a WorkOS bearer session with billing:manage. API keys are rejected so saved payment methods stay limited to interactive billing administrators.

Example response

{
  "requestId": "req_2ZK8Q1W9F4M6P7R3"
}

Give this prompt to your agent

Failure posture

treat non-2xx responses as contract-aware failures, not free-form errors
preserve requestId and traceparent in logs and downstream reports
if provenance or freshness metadata is present, return it unchanged so trust is not lost in the handoff