Agent Session API

The Session API is used by agents to create short-lived session keys.
These keys authenticate agent actions for a given {domain} and must be included in all subsequent agent requests.

Endpoint

Method	Endpoint	Description
`POST`	`/{domain}/agent/session/create`	Create a new agent session.

Authentication & Requirements

Domain Validation – The {domain} must be a registered merchant domain.
User Key – Agents must include an X-User-Key header for initial validation.
Session Key – The API returns a short-lived session_key that agents use for subsequent requests.

1. Create Session

Generates a new session key for an agent, scoped to the specified {domain}.

Example request: Create agent session

curl -X POST "https://api.waltacheckout.com/{domain}/agent/session/create" \
  -H "X-User-Key: {user_key}" \
  -d '{}'

Example Response

{
  "session_key": "sess_abc123xyz"
}

Features

Session keys are short-lived, reducing the risk of credential misuse.
Actions performed with this key are logged and scoped to the agent.
Required before calling any agent endpoints such as Cart API or Checkout API.

Continue to Cart API