> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gateway.connexease.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Session API

> The one Connexease endpoint your backend calls to mint a session token — request, response, and the key you authenticate with.

Your backend calls a single Connexease endpoint to mint a short-lived **session token**: the **Session API**. The SDK uses that token to run the rest of the onboarding for you, so this is the only endpoint you integrate with directly.

## Endpoint

```markdown theme={null}
POST https://public-api.gateway.connexease.com/public/api/v1/wa/embedded-signup/sessions
```

***

<ParamField header="Authorization" type="string" required>
  API key in `Bearer pk_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx` format.
</ParamField>

<ParamField header="Content-Type" type="string" required>
  Always `application/json`.
</ParamField>

<Note>
  The SDK never asks you to call this from the browser. Your backend calls it (see [Backend Integration](/public-embedded-signup-sdk/backend-integration)); the SDK only calls it directly as a fallback if you pass `secretKey` to `launch()`.
</Note>

## Response  / Success (HTTP 200)

```json theme={null}
{
  "isSuccess": true,
  "data": {
    "gh": "sess_a1b2c3d4e5f6",
    "wv": "1234567890",
    "pt": "9876543210",
    "li": "2026-06-08T13:45:00.000Z",
    "bn": "v24.0",
  }
}
```

Forward this payload to the SDK exactly as you receive it — your `fetchSessionToken` returns it untouched and the SDK reads the fields it needs. You don't need to parse or transform it.

## Errors

A failed request returns a non-2xx status with an error body, for example when the secret key is invalid:

```json theme={null}
{
  "isSuccess": false,
  "message": "Invalid API key",
  "errors": {
    "description": "The provided secret key is invalid or revoked."
  }
}
```

In your proxy, forward non-2xx responses to the caller (status + body) so the SDK can surface the message in its error modal. See [Backend Integration](/public-embedded-signup-sdk/backend-integration).