Payment Method Session

A payment method session is a temporary, secure session created to collect and store a customer's payment method. It doesn't initiate a charge but ensures the payment method is tokenized and safely linked to the customer's profile.

Download Payment Method Session OpenAPI Document

End Points

POST

/paymentmethodsessions

GET

/paymentmethodsessions/{payment_method_session_id}

Attribute

payment_method_session_id

string

A unique identifier for the payment method session.

customer_id

string

A unique identifier for the customer.

description

string

Description of the payment method session.

created_time

long

The timestamp (milliseconds) indicating when the payment method session was created.

{
    "payment_method_session_id": "1987000000724209",
    "customer_id": "1987000000724207",
    "description": "Payment method session for customer 1987000000724207",
    "created_time": 1708950672
}

Create Payment Method Session

This API endpoint allows you to create a payment method session for a customer to collect their payment method details securely.
OAuth Scope : ZohoPay.paymentmethods.CREATE

Arguments

customer_id

string

(Required)

A unique identifier for the customer.

description

string

Description of the payment method session.

Query Parameters

account_id

long

(Required)

The Zoho Payments account ID.

Request Example

OkHttpClient client = new OkHttpClient();

MediaType mediaType = MediaType.parse("application/json");
RequestBody body = RequestBody.create(mediaType, "{\"field1\":\"value1\",\"field2\":\"value2\"}");
Request request = new Request.Builder()
  .url("https://payments.zoho.com/api/v1/paymentmethodsessions?account_id=23137556")
  .post(body)
  .addHeader("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f")
  .addHeader("content-type", "application/json")
  .build();

Response response = client.newCall(request).execute();

HttpResponse<String> response = Unirest.post("https://payments.zoho.com/api/v1/paymentmethodsessions?account_id=23137556")
  .header("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f")
  .header("content-type", "application/json")
  .body("{\"field1\":\"value1\",\"field2\":\"value2\"}")
  .asString();

const options = {
  method: 'POST',
  headers: {
    Authorization: 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f',
    'content-type': 'application/json'
  },
  body: '{"field1":"value1","field2":"value2"}'
};

fetch('https://payments.zoho.com/api/v1/paymentmethodsessions?account_id=23137556', options)
  .then(response => response.json())
  .then(response => console.log(response))
  .catch(err => console.error(err));

const settings = {
  "async": true,
  "crossDomain": true,
  "url": "https://payments.zoho.com/api/v1/paymentmethodsessions?account_id=23137556",
  "method": "POST",
  "headers": {
    "Authorization": "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f",
    "content-type": "application/json"
  },
  "processData": false,
  "data": "{\"field1\":\"value1\",\"field2\":\"value2\"}"
};

$.ajax(settings).done(function (response) {
  console.log(response);
});

import http.client

conn = http.client.HTTPSConnection("payments.zoho.com")

payload = "{\"field1\":\"value1\",\"field2\":\"value2\"}"

headers = {
    'Authorization': "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f",
    'content-type': "application/json"
    }

conn.request("POST", "/api/v1/paymentmethodsessions?account_id=23137556", payload, headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))

const http = require("https");

const options = {
  "method": "POST",
  "hostname": "payments.zoho.com",
  "port": null,
  "path": "/api/v1/paymentmethodsessions?account_id=23137556",
  "headers": {
    "Authorization": "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f",
    "content-type": "application/json"
  }
};

const req = http.request(options, function (res) {
  const chunks = [];

  res.on("data", function (chunk) {
    chunks.push(chunk);
  });

  res.on("end", function () {
    const body = Buffer.concat(chunks);
    console.log(body.toString());
  });
});

req.write(JSON.stringify({field1: 'value1', field2: 'value2'}));
req.end();

const unirest = require("unirest");

const req = unirest("POST", "https://payments.zoho.com/api/v1/paymentmethodsessions");

req.query({
  "account_id": "23137556"
});

req.headers({
  "Authorization": "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f",
  "content-type": "application/json"
});

req.type("json");
req.send({
  "field1": "value1",
  "field2": "value2"
});

req.end(function (res) {
  if (res.error) throw new Error(res.error);

  console.log(res.body);
});

const request = require('request');

const options = {
  method: 'POST',
  url: 'https://payments.zoho.com/api/v1/paymentmethodsessions',
  qs: {account_id: '23137556'},
  headers: {
    Authorization: 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f',
    'content-type': 'application/json'
  },
  body: {field1: 'value1', field2: 'value2'},
  json: true
};

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});

require 'uri'
require 'net/http'
require 'openssl'

url = URI("https://payments.zoho.com/api/v1/paymentmethodsessions?account_id=23137556")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
http.verify_mode = OpenSSL::SSL::VERIFY_NONE

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'
request["content-type"] = 'application/json'
request.body = "{\"field1\":\"value1\",\"field2\":\"value2\"}"

response = http.request(request)
puts response.read_body

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://payments.zoho.com/api/v1/paymentmethodsessions?account_id=23137556",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => "{\"field1\":\"value1\",\"field2\":\"value2\"}",
  CURLOPT_HTTPHEADER => [
    "Authorization: Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f",
    "content-type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

<?php

$request = new HttpRequest();
$request->setUrl('https://payments.zoho.com/api/v1/paymentmethodsessions');
$request->setMethod(HTTP_METH_POST);

$request->setQueryData([
  'account_id' => '23137556'
]);

$request->setHeaders([
  'Authorization' => 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f',
  'content-type' => 'application/json'
]);

$request->setBody('{"field1":"value1","field2":"value2"}');

try {
  $response = $request->send();

  echo $response->getBody();
} catch (HttpException $ex) {
  echo $ex;
}

<?php

$client = new http\Client;
$request = new http\Client\Request;

$body = new http\Message\Body;
$body->append('{"field1":"value1","field2":"value2"}');

$request->setRequestUrl('https://payments.zoho.com/api/v1/paymentmethodsessions');
$request->setRequestMethod('POST');
$request->setBody($body);

$request->setQuery(new http\QueryString([
  'account_id' => '23137556'
]));

$request->setHeaders([
  'Authorization' => 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f',
  'content-type' => 'application/json'
]);

$client->enqueue($request)->send();
$response = $client->getResponse();

echo $response->getBody();

curl --request POST \
  --url 'https://payments.zoho.com/api/v1/paymentmethodsessions?account_id=23137556' \
  --header 'Authorization: Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f' \
  --header 'content-type: application/json' \
  --data '{"field1":"value1","field2":"value2"}'

{
    "customer_id": "1987000000724207",
    "description": "Payment method session for customer 1987000000724207"
}

{
    "code": 0,
    "message": "success",
    "payment_method_session": {
        "payment_method_session_id": "1987000000724209",
        "customer_id": "1987000000724207",
        "description": "Payment method session for customer 1987000000724207",
        "created_time": 1708950672
    }
}

Retrieve Payment Method Session

This API endpoint allows you to retrieve the details of a specific payment method session.
OAuth Scope : ZohoPay.paymentmethods.READ

Path Parameters

payment_method_session_id

long

(Required)

A unique identifier for the payment method session.

Query Parameters

account_id

long

(Required)

The Zoho Payments account ID.

Request Example

OkHttpClient client = new OkHttpClient();

Request request = new Request.Builder()
  .url("https://payments.zoho.com/api/v1/paymentmethodsessions/731000001449003?account_id=23137556")
  .get()
  .addHeader("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f")
  .build();

Response response = client.newCall(request).execute();

HttpResponse<String> response = Unirest.get("https://payments.zoho.com/api/v1/paymentmethodsessions/731000001449003?account_id=23137556")
  .header("Authorization", "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f")
  .asString();

const options = {
  method: 'GET',
  headers: {
    Authorization: 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'
  }
};

fetch('https://payments.zoho.com/api/v1/paymentmethodsessions/731000001449003?account_id=23137556', options)
  .then(response => response.json())
  .then(response => console.log(response))
  .catch(err => console.error(err));

const settings = {
  "async": true,
  "crossDomain": true,
  "url": "https://payments.zoho.com/api/v1/paymentmethodsessions/731000001449003?account_id=23137556",
  "method": "GET",
  "headers": {
    "Authorization": "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
  }
};

$.ajax(settings).done(function (response) {
  console.log(response);
});

import http.client

conn = http.client.HTTPSConnection("payments.zoho.com")

headers = { 'Authorization': "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f" }

conn.request("GET", "/api/v1/paymentmethodsessions/731000001449003?account_id=23137556", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))

const http = require("https");

const options = {
  "method": "GET",
  "hostname": "payments.zoho.com",
  "port": null,
  "path": "/api/v1/paymentmethodsessions/731000001449003?account_id=23137556",
  "headers": {
    "Authorization": "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
  }
};

const req = http.request(options, function (res) {
  const chunks = [];

  res.on("data", function (chunk) {
    chunks.push(chunk);
  });

  res.on("end", function () {
    const body = Buffer.concat(chunks);
    console.log(body.toString());
  });
});

req.end();

const unirest = require("unirest");

const req = unirest("GET", "https://payments.zoho.com/api/v1/paymentmethodsessions/731000001449003");

req.query({
  "account_id": "23137556"
});

req.headers({
  "Authorization": "Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
});

req.end(function (res) {
  if (res.error) throw new Error(res.error);

  console.log(res.body);
});

const request = require('request');

const options = {
  method: 'GET',
  url: 'https://payments.zoho.com/api/v1/paymentmethodsessions/731000001449003',
  qs: {account_id: '23137556'},
  headers: {
    Authorization: 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'
  }
};

request(options, function (error, response, body) {
  if (error) throw new Error(error);

  console.log(body);
});

require 'uri'
require 'net/http'
require 'openssl'

url = URI("https://payments.zoho.com/api/v1/paymentmethodsessions/731000001449003?account_id=23137556")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
http.verify_mode = OpenSSL::SSL::VERIFY_NONE

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'

response = http.request(request)
puts response.read_body

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://payments.zoho.com/api/v1/paymentmethodsessions/731000001449003?account_id=23137556",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

<?php

$request = new HttpRequest();
$request->setUrl('https://payments.zoho.com/api/v1/paymentmethodsessions/731000001449003');
$request->setMethod(HTTP_METH_GET);

$request->setQueryData([
  'account_id' => '23137556'
]);

$request->setHeaders([
  'Authorization' => 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'
]);

try {
  $response = $request->send();

  echo $response->getBody();
} catch (HttpException $ex) {
  echo $ex;
}

<?php

$client = new http\Client;
$request = new http\Client\Request;

$request->setRequestUrl('https://payments.zoho.com/api/v1/paymentmethodsessions/731000001449003');
$request->setRequestMethod('GET');
$request->setQuery(new http\QueryString([
  'account_id' => '23137556'
]));

$request->setHeaders([
  'Authorization' => 'Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'
]);

$client->enqueue($request)->send();
$response = $client->getResponse();

echo $response->getBody();

curl --request GET \
  --url 'https://payments.zoho.com/api/v1/paymentmethodsessions/731000001449003?account_id=23137556' \
  --header 'Authorization: Zoho-oauthtoken 1000.41d9xxxxxxxxxxxxxxxxxxxxxxxxc2d1.8fccxxxxxxxxxxxxxxxxxxxxxxxx125f'

{
    "code": 0,
    "message": "success",
    "payment_method_session": {
        "payment_method_session_id": "1987000000724209",
        "customer_id": "1987000000724207",
        "status": "succeeded",
        "payment_method": {
            "payment_method_id": "1987000000724215",
            "type": "card",
            "status": "active",
            "created_time": 1708950672
        }
    }
}