API ReferenceHosted Experience

Create Embeddable URL

Backend-only API-key call. This initializes or resumes the borrower scope, creates a browser bootstrap token, and returns an embeddable URL that can be opened in an iframe, webview, browser tab, or mobile app shell. The bootstrap token is embedded in the URL fragment and expires after 120 seconds. Optionally, buyer-apps can include buyer-supplied bureau data in the top-level `bureau` object. When `bureau` is provided, `journey.bureauConsent` must be `true`.

Authentication

AuthorizationBearer

Send Authorization: Bearer <PLATFORM_API_KEY> from a trusted back-end.

Request

This endpoint expects an object.
borrowerProviderIDstringRequired>=1 character
Stable borrower identity from the partner system.
journeyTypeenumOptionalDefaults to PERSONAL_LOAN
Allowed values:
profileobjectOptional
workProfileobjectOptional
addressobjectOptional
journeyobjectOptional
goldLoanobjectOptional
bureauobject or nullOptional

Optional buyer-supplied bureau data. When this object is provided, journey.bureauConsent must be true.

Response headers

Cache-Controlstring

The route returns non-cacheable session material.

Response

Hosted Experience URL.
embedURLstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

embedUrlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

embedurlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

Embedurlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

EmbedUrlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

EmbedURLstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

EMBEDurlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

EMBEDUrlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

EMBEDURLstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

embed_urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

embed_Urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

embed_URLstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

Embed_urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

Embed_Urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

Embed_URLstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

EMBED_urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

EMBED_Urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

EMBED_URLstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

embed-urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

embed-Urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

embed-URLstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

Embed-urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

Embed-Urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

Embed-URLstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

EMBED-urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

EMBED-Urlstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

EMBED-URLstringformat: "uri"

Canonical Hosted Experience URL. The fragment contains a short-lived bt_* bootstrap token and should be opened immediately.

Errors

400
Bad Request Error
401
Unauthorized Error
404
Not Found Error
500
Internal Server Error