---
title: "Create a single-use Client Secret"
method: POST
path: "/client-secrets"
tags: ["ClientSecrets"]
---

# Create a single-use Client Secret

`POST /client-secrets`

## Headers

- `Trace-Id` string
- `End-User-Agent` string
- `End-User-Ip` string
- `End-User-OS` string
- `End-User-Device-Id` string
- `End-User-Device-Manufacturer` string
- `End-User-Device-Model` string

## Request body

- object
  - `payer` PayerId
    - `id` string, uuid, required
  - `type` 'CARD' — The type of object to create the Client Secret for. Defaults to CARD.

## Response `200`

Client Secret created successfully

- object
  - `clientSecret` string — Client Secret returned by /client-secrets

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `500` — Internal Server Error

---

[API](https://skmtc.net/plastiq/apis/plastiq-public-api.md) · [All operations](https://skmtc.net/plastiq/apis/plastiq-public-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/plastiq/plastiq-public-api/versions/cfd776dd9ac5/schema)