> ## Documentation Index
> Fetch the complete documentation index at: https://api-docs.helpyousponsor.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Prepare workspace card verification

> Creates or resumes a Stripe customer and card SetupIntent after intent confirmation. This verifies a payment method without charging it or enabling automatic billing. The browser confirms the returned client secret with Stripe and can exchange the payment-return token to resume. An existing mailbox account receives HTTP200 sign-in routing.



## OpenAPI

````yaml post /workspace-onboarding/{public_id}/payment-intent
openapi: 3.0.0
info:
  title: Gratona API
  description: >-
    REST API for the Gratona fundraising platform, including donor, donation,
    sponsorship, program, event, and integration workflows. Endpoints are
    organized by tag. Most endpoints require either a Passport bearer token or
    an issued API key — see the Security Schemes section.
  contact:
    name: Gratona Engineering
    url: https://gratona.com
    email: devs@gratona.com
  version: 1.0.0
servers:
  - url: https://api.gratona.com/v1
    description: Server Version 1.0.0
security: []
tags:
  - name: Auth
    description: >-
      Login, signup, logout, password reset, and email verification for admin
      users and donors.
  - name: Donors
    description: >-
      Donor records: CRUD, profile fields, household linkage, search, filters,
      merge, and duplicate detection.
  - name: Donations
    description: >-
      Individual donation records, recurring commitments, soft credits, refunds,
      designations, and exports.
  - name: Sponsorships
    description: >-
      Donor-to-entity commitment relationships, lifecycle transitions, and
      commitment-specific filters.
  - name: Entities
    description: >-
      Recipient records (children, families, projects, animals, etc.), their
      status, and entity-level fields.
  - name: Programs
    description: >-
      Program / campaign configuration: hierarchy, settings, and program-level
      metadata.
  - name: Forms
    description: >-
      Custom form builder (HysForm), form fields, standardized donor fields, and
      field migrations.
  - name: Trips
    description: >-
      Mission-trip management: trips, participants, budgets, tasks,
      e-signatures, fundraising milestones, and background checks.
  - name: Communications
    description: >-
      Email templates, SMS, newsletters, donor email manager, and per-donor
      notes.
  - name: Payments
    description: >-
      Payment-gateway management (Stripe, PayPal, Flutterwave, QuickBooks).
      Excludes inbound webhooks — see the Webhooks tag.
  - name: Reports
    description: Dashboards, analytics, scheduled reports, and exports.
  - name: Admin
    description: >-
      Client-account administration: users, groups/permissions, settings,
      integrations, and account lifecycle.
  - name: Donor Portal
    description: >-
      Endpoints consumed by the donor-facing portal (donor login, dashboard,
      donation history, messages).
  - name: Recipient Portal
    description: Endpoints consumed by the recipient-facing portal.
  - name: Public
    description: >-
      Unauthenticated public endpoints: donor signup, public trip pages,
      peer-to-peer campaigns, public checkout.
  - name: Webhooks
    description: >-
      Inbound webhooks from third parties (Stripe, PayPal, Flutterwave, Checkr,
      DropboxSign). Annotated minimally for reference; payload shapes are owned
      by the upstream provider.
  - name: Events
    description: >-
      Event setup, invitations, registration, ticketing, attendance and event
      reporting.
  - name: Journeys
    description: >-
      Journey graphs, activation, enrollment, message templates and event
      follow-up automations.
  - name: Tasks
    description: Workspace tasks, assignments, saved task views and record collaboration.
  - name: Fundraising
    description: >-
      Fundraising portfolios, stewardship plans, giving anniversaries and
      personal donor follow-up.
  - name: Impact Stories
    description: Story intake, review, assets, consent and publication workflows.
  - name: Integrations
    description: Workspace integration connections, mappings, synchronization and recovery.
  - name: Email Calendar
    description: Connected email/calendar accounts and donor interactions.
  - name: Spaces
    description: Workspace Spaces and collaborative Pages.
  - name: Library
    description: Workspace documents, source connections, files and analysis.
  - name: Intelligence
    description: Donor intelligence and Tali workspace workflows.
  - name: Automation
    description: >-
      V3 automation primitive discovery, input validation, invocation and Zapier
      contracts.
  - name: Schema
    description: V3 model, enum, capability and scope discovery.
  - name: Zapier
    description: Zapier automation connections, polling feeds and actions.
  - name: Files
    description: Files
  - name: Client
    description: Client
  - name: Payment Gateways
    description: Payment Gateways
  - name: Email Settings
    description: Email Settings
  - name: Admin Dashboard
    description: Admin Dashboard
  - name: Recipients
    description: Recipients
  - name: Historical Archived Updates
    description: Historical Archived Updates
  - name: Team & access
    description: Team & access
  - name: Settings
    description: Settings
  - name: Notifications
    description: Notifications
  - name: Participation
    description: Participation
  - name: Users
    description: Users
  - name: Wrapped
    description: Wrapped
  - name: Donor SignUp
    description: Donor SignUp
  - name: Frontend
    description: Frontend
  - name: User
    description: User
  - name: Workspace
    description: Workspace
paths:
  /workspace-onboarding/{public_id}/payment-intent:
    post:
      tags:
        - Workspace
      summary: Prepare workspace card verification
      description: >-
        Creates or resumes a Stripe customer and card SetupIntent after intent
        confirmation. This verifies a payment method without charging it or
        enabling automatic billing. The browser confirms the returned client
        secret with Stripe and can exchange the payment-return token to resume.
        An existing mailbox account receives HTTP200 sign-in routing.
      operationId: reference_Frontend_WorkspaceOnboardingController_createPaymentIntent
      parameters:
        - name: X-Workspace-Onboarding-Session
          in: header
          description: >-
            Opaque resume credential returned after mailbox or invitation
            authentication. It is bound to this setup session and expires or
            rotates during handoff.
          required: true
          schema:
            type: string
            maxLength: 64
            minLength: 64
          example: example-session-token-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        - name: public_id
          in: path
          description: Public setup-session UUID.
          required: true
          schema:
            type: string
            format: uuid
          example: 550e8400-e29b-41d4-a716-446655440000
      responses:
        '200':
          description: Operation result.
          content:
            application/json:
              schema:
                oneOf:
                  - required:
                      - status
                      - data
                    properties:
                      status:
                        type: string
                        enum:
                          - success
                        example: success
                      data:
                        required:
                          - publishable_key
                          - client_secret
                          - setup_intent_id
                          - payment_return
                        properties:
                          publishable_key:
                            type: string
                            example: pk_test_EXAMPLE
                          client_secret:
                            description: >-
                              Stripe SetupIntent client secret for this setup
                              session. Treat as a secret.
                            type: string
                            example: seti_EXAMPLE_secret_EXAMPLE
                          setup_intent_id:
                            type: string
                            example: seti_EXAMPLE
                          payment_return:
                            required:
                              - public_id
                              - token
                              - expires_at
                            properties:
                              public_id:
                                description: Public setup-session UUID.
                                type: string
                                format: uuid
                                example: 550e8400-e29b-41d4-a716-446655440000
                              token:
                                description: >-
                                  Short-lived, single-use return token for
                                  payment-return/exchange.
                                type: string
                                example: >-
                                  1760961600.0000000000000000000000000000000000000000000000000000000000000000
                              expires_at:
                                type: string
                                format: date-time
                                example: '2026-10-20T12:15:00Z'
                            type: object
                        type: object
                    type: object
                  - $ref: '#/components/schemas/WorkspaceOnboardingExistingAccount'
        '401':
          description: The setup session is unavailable.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WorkspaceOnboardingError'
        '404':
          description: Workspace admission is disabled.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WorkspaceOnboardingError'
        '409':
          description: >-
            Intent confirmation is required or a conflicting setup is in
            progress.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WorkspaceOnboardingError'
        '429':
          description: The setup request rate limit was reached.
        '503':
          description: Workspace setup or a required service is unavailable.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WorkspaceOnboardingError'
      security: []
      servers:
        - url: https://api.gratona.com/v1
          description: Gratona API
components:
  schemas:
    WorkspaceOnboardingExistingAccount:
      required:
        - status
        - code
        - data
      properties:
        status:
          type: string
          enum:
            - success
          example: success
        code:
          type: string
          enum:
            - workspace_onboarding_existing_account
          example: workspace_onboarding_existing_account
        data:
          required:
            - state
            - next_action
            - redirect_path
          properties:
            state:
              type: string
              enum:
                - existing_account
              example: existing_account
            next_action:
              type: string
              enum:
                - sign_in
              example: sign_in
            redirect_path:
              type: string
              enum:
                - /sign-in
              example: /sign-in
          type: object
      type: object
    WorkspaceOnboardingError:
      required:
        - status
        - code
        - message
      properties:
        status:
          type: string
          enum:
            - error
          example: error
        code:
          type: string
          example: workspace_onboarding_session_unavailable
        message:
          type: string
          example: This setup session is no longer available. Start again.
      type: object

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.