Advanced session inputs

Wallet, correlation, flow, and trusted KYC inputs on GateSession creation.

POST /gate_sessions accepts optional inputs that reduce repeated user entry while keeping commercial values server-bound.

Available to partners

• flow: lock the widget to on_ramp or off_ramp.
• wallet_address: pre-fill a destination wallet. Network-format validation happens when the flow resolves the network.
• user_reference: opaque partner correlation value, maximum 128 characters. It is echoed in relevant webhook data.
• target_token and target_network: constrain the session to a selected asset and network.
• quote_preview_id: bind the session to a compatible, unconsumed quote preview when preview locks are enabled.

Trusted partner KYC package

kyc_package is accepted only when the Gate partner is authorized as kyc_trusted. Otherwise session creation returns 403 with kyc_package_not_trusted.

The package is opaque to the public API but must include a non-empty provider string. Gate does not echo the raw identity body in responses or webhooks. A successful session sets kyc_pre_verified: true and emits gate_session.kyc_package_accepted with only session, partner, mode, provider, accepted time, and optional user reference.

{
  "amount": "100.00",
  "currency": "BRL",
  "flow": "on_ramp",
  "wallet_address": "0x742d35Cc6634C0532925a3b8D4...",
  "user_reference": "order_abc123",
  "kyc_package": {
    "provider": "YourKycProvider",
    "verification_reference": "verify_123"
  },
  "return_url": "https://partner.example/gate/complete"
}

Send identity data only under an agreed trusted-partner contract. Keep your own source record; the acceptance webhook is evidence of receipt, not a copy of the submitted package.