Authorize MIT Payment
This endpoint initiates an authorization without shopper interaction for merchant initiated transactions (MIT). It requires a recurringReference from a prior Create MIT Session. No payment page is rendered as the shopper normally is not present.
The endpoint starts an online transaction that:
- Registers the payment with Aera
- Defines the transaction amount and configuration
- All subsequent operations — such as capture, cancel, refund, update, and status retrieval — reference the
pspReferencegenerated by this request.
Important note: It is the responsibility of the merchant to only initiate payments which are agreed with the shopper in the terms and conditions. When the payment is merchant-initiated (MIT), the shopper may request a chargeback and the merchant would be liable in a dispute situation.
Request Structure
{
"header": {
"merchantId": "Aera Merchant ID",
"idempotency-key": "UUID v7 provided by merchant to uniquely identify the request"
},
"body": {
"transactionData": {
"merchantReference": "Merchant provided reference to the payment (e.g. order number)",
"recurringReference": "Mandatory: Reference to the initial standing instruction for a recurring payment",
"immediateCapture": "Optional, true if immediate capture requested, default false",
"splitShipment": "Optional, true if shipment potentially can be split into multiple shipments",
"amountDetails": {
"amount": "Gross amount in minor units",
"currency": "ISO 4217 alphabetic code (e.g.NOK), must be the same as the merchant currency" }
}
}
}Response Structure
The response contains session metadata and checkout information.
{
"responseInfo": {
"responseCode": "000",
"responseText": "Approved"
},
"sessionInfo": {
"pspReference": "018f7a2e-8f5c-7a9b-b123-123456789abc",
"createdAt": "2026-03-01T10:15:30Z",
"expiredAt": "2026-03-01T10:30:30Z",
}
}Field reference: Authorize MIT Payment
HTTP Headers
Keep your
x-api-keyandAuthorizationtoken secret. Store them in environment variables or a secrets manager — never hard-code credentials in source files, client-side code, public repositories, or browser requests. Rotate compromised keys immediately through the Aera dashboard.
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
x-api-key | string | Yes | – | API key assigned by Aera. |
merchant-id | string | Yes | – | Merchant ID assigned by Aera. |
idempotency-key | string (UUID v7) | Yes | – | Unique key identifying this request. Safe retries must reuse the same key. |
Authorization | string | Yes | – | Bearer <access token> |
Accept | string | Yes | application/vnd.payments.v1+json | API versioned accept header. |
Content-Type | string | Yes | application/vnd.payments.v1+json | API versioned content type. |
Request body
transactionData object
transactionData object| Field | Type | Required | Default | Description |
|---|---|---|---|---|
merchantReference | string | Yes | – | Merchant reference (for example, order number). |
recurringReference | string | Yes | - | The reference from the initial standing instruction for the recurring payments. |
immediateCapture | boolean | No | false | If true, authorizes and captures immediately. If false, authorizes first and requires capture later (if applicable). |
splitShipment | boolean | No | false | Set totrueif shipment potentially can be split into multiple shipments. |
amountDetails | object | Yes | – | Amount object (minor units). |
transactionData.amountDetails
transactionData.amountDetails| Field | Type | Required | Default | Description |
|---|---|---|---|---|
amount | integer | Yes | – | Gross amount in minor units (for example, 19900 = NOK 199.00). |
currency | string (ISO 4217) | Yes | – | Currency code (for example, NOK), must be the same as the merchant currency. |
Field reference: response
High-level processing result information.
| Field | Type | Required | Description |
|---|---|---|---|
responseCode | string (3 digits) | Yes | Response code from a predefined list. |
responseText | string | Yes | Human-readable description of the response code. |
sessionInfo
Authorize Payment metadata.
| Field | Type | Required | Description |
|---|---|---|---|
pspReference | string (UUID v7) | Yes | Unique session identifier generated by Aera. Use this reference for all subsequent operations (capture, cancel, refund, status). |
createdAt | string (ISO 8601) | Yes | Timestamp when the session was created (UTC). |
expiredAt | string (ISO 8601) | Yes | Timestamp when the session expires (UTC). |
Updated 13 days ago