Create Order

POST /api/orders/create

Alternate public create path (legacy / special clients). Rate limit: 10/min. Prefer POST /api/checkout/start for Vite storefronts and POST /api/embed/checkout for embeds.

Response shape

{
  "order": { "orderId": "…", "status": "…" },
  "checkoutToken": "…"
}

Use the token with delivery/keys endpoints or /api/checkout/session / /api/checkout/enter. CSRF exempt (checkout lifecycle).