# Create a new order

Endpoint: POST /order
Version: 1.0.0
Security: InfiniHmac

## Header parameters:

  - `Date` (string)
    GMT server time (e.g. Tue, 21 Jan 2025 12:00:00 GMT). Required for every request.

  - `Authorization` (string)
    HMAC-SHA256 `Signature` header. See the [Authentication](/docs/en/4-authorization) guide.

  - `Digest` (string)
    SHA-256 digest of the request body (when a body is present).

## Request fields (application/json):

  - `client_reference` (string)
    Client Reference

  - `request_id` (string, required)
    request id (unique)

  - `order_desc` (string)
    Order description

  - `currency` (string)
    Order currency (USD, EUR, GBP, CAD, SGD, AUD)

  - `amount` (string, required)
    Order amount. The minimum is greater than 0.1 for crypto acquiring; fiat payment methods require at least 16.

  - `merchant_alias` (string)
    customized merchant alias (optional)

  - `expires_in` (integer)
    Time to live in seconds (e.g., 3600 for 1 hour, 0 for default order expires time)

  - `success_url` (string)
    Success redirect Url

  - `failure_url` (string)
    Failure redirect Url

  - `pay_methods` (array)
    Enabled payment modes for this order (optional, inherits from merchant config if not specified)

  - `email` (string)
    Payer email (optional)

## Response 200 fields (application/json):

  - `client_reference` (string)

  - `request_id` (string)

  - `order_id` (string)
    Order id

  - `checkout_url` (string)
    Checkout url

  - `token` (string)
    Token