Skip to main content
POST
Generate widget token

Authorizations

x-api-key
string
header
required

Your SideShift Connect API key (sk_live_* or sk_test_*). Generate from Settings → Connect.

Body

application/json
sideshiftAccountId
string
required
Example:

"acct_a1b2c3d4e5f6"

widgetType
enum<string>
required
Available options:
payout,
payin,
both
Example:

"both"

expiresInSeconds
integer
default:3600

Token lifetime in seconds

Required range: 60 <= x <= 86400
targetDomain
string

Embedding domain (must be in allowed domains)

escrowMode
boolean
default:false

Route pay-in deposits to your company wallet

escrowDestinationCompanyId
string

Override escrow destination (defaults to your company)

threeDsLevel
enum<string> | null
default:frictionless_if_required

Whop card setup 3DS preference. mandate_challenge requires a challenge; mandate_if_required mandates one only when the processor requires it; frictionless_if_required and null use frictionless 3DS. Risk and authentication recovery rules can override the preference. Payments of $1,000 or more use mandate_if_required unless mandate_challenge is selected. Payment mode uses the plan policy. This choice is bound to the session and cannot be changed by the payer.

Available options:
mandate_challenge,
mandate_if_required,
frictionless_if_required,
null
allowFraudBypass
boolean
default:false
deprecated

Deprecated alias for the default Whop frictionless setup preference. An explicit threeDsLevel takes precedence. Does not enable Stripe or guarantee that a challenge will be skipped. Previously issued Stripe sessions remain valid until their original expiry (at most 24 hours).

Response

Token generated

success
boolean
data
object