# Stripe 2026-09-30.endive removes payment_method_types from Checkout Session creation

- **Provider:** Stripe
- **Endpoint:** `POST /v1/checkout/sessions`
- **Effective:** 2026-09-30
- **Severity:** high
- **Change:** required-field
- **Status:** unverified (secondary reports only; SHAPI does not open fix PRs for it)

## What changed

From API version 2026-09-30.endive, creating a Checkout Session with payment_method_types returns a 400 error. Stripe replaces it with dynamic payment methods, excluded_payment_method_types, or the new allowed_payment_method_types, which filters out incompatible types instead of failing.

## What to do

Before moving to 2026-09-30.endive, stop sending payment_method_types when creating Checkout Sessions. Use dynamic payment methods (manage them in the Dashboard), excluded_payment_method_types to drop some, or allowed_payment_method_types to list the ones you accept.

## Sources

- Provider notice (2026-09-30): https://docs.stripe.com/changelog/endive/2026-09-30/remove-payment-method-types-checkout-sessions
- https://docs.stripe.com/api/checkout/sessions/create?api-version=2026-09-30.endive

## Machine-readable

- Advisory: https://github.com/SriVarshini09/shapi-advisories/blob/main/advisories/stripe-endive-checkout-session-payment-method-types-removed.json
- OSV: https://shapi.dev/osv/stripe-endive-checkout-session-payment-method-types-removed.json