Stripe 2026-09-30.endive removes payment_method_types from Checkout Session creation
- Provider
- Stripe
- Endpoint
POST /v1/checkout/sessions- Effective
- 2026-09-30
- Severity
- high
- Change
- required-field
- Status
- unverified (secondary reports only; SHAPI does not open fix PRs for it)
What changed
From API version 2026-09-30.endive, creating a Checkout Session with payment_method_types returns a 400 error. Stripe replaces it with dynamic payment methods, excluded_payment_method_types, or the new allowed_payment_method_types, which filters out incompatible types instead of failing.
What to do
Before moving to 2026-09-30.endive, stop sending payment_method_types when creating Checkout Sessions. Use dynamic payment methods (manage them in the Dashboard), excluded_payment_method_types to drop some, or allowed_payment_method_types to list the ones you accept.
Sources
- Provider notice (2026-09-30)
- https://docs.stripe.com/api/checkout/sessions/create?api-version=2026-09-30.endive
Check your code
bash
npx shapi-cli scan .shapi scan lists the call sites this change affects; shapi fix repairs them test-first when the advisory has an automatic fix. All advisories · Markdown · OSV · JSON