Start Authorization (OAuth)
POST/api/stripe/integrations/:id/authorize
Begins the Stripe Connect OAuth flow. Returns an authorize_url that the merchant should be redirected to in order to grant access. Stripe will redirect back to /api/stripe/oauth/callback.
This endpoint currently requires session authentication; Personal Access Token scope support is in progress.
Requires admin or power-user permissions.
Returns 422 when Stripe Connect is not configured on the server (no Connect client ID), instead of an authorize URL Stripe would reject.
Request
Responses
- 200
- 401
- 403
- 404
- 422
- 429
OK
Response Headers
Unauthenticated — the bearer token is missing, revoked, expired, or malformed. Never retry automatically; fix the credential. See the Errors guide.
Forbidden — the token lacks a required scope, the endpoint is not available to API tokens, or the user behind the token lacks the permission. A human must adjust the token scopes or user permissions; do not retry.
Not found — no record with the given identifier (or the route does not exist). Verify the ID before retrying.
Unprocessable Content
Response Headers
Rate limited — platform limit is 1,000 requests/min; individual tokens may carry lower limits. Honor the Retry-After header before retrying. See the Rate Limits guide.