Which sites may frame this key's checkout

Prod Env

GET

/api/v1/sell/frame-ancestors

The frame-ancestors source list for a publishable key, as the checkout
page sends it in its own Content-Security-Policy. Enforcement has to be the
browser's — a Referer header is a request to be lied to.

You will not normally call this; it is documented because it is public.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

API Key

Add parameter in header

X-Etick-Key

Example:

X-Etick-Key: ********************

Query Params

Responses

🟢200

application/json

Bodyapplication/json

Request Example

Shell

JavaScript

Java

Swift

curl --location '/api/v1/sell/frame-ancestors?key=pk_live_4kQ2s9vB1nR7mZxL0aYw8TgH3dCpUeJf' \
--header 'Authorization: Bearer <token>'

Response Example

{
    "value": "'self' https://example.com http://example.com"
}

Modified at 2026-09-02 12:00:03

The checkout palettes

List the events this key sells