checkout_url, and it is mailed once they pay.
Idempotency
Send anIdempotency-Key header (or an idempotency_key field) on create calls. A repeat with the same key returns the original order with status 200 instead of 201, so retries never double-mail.
Errors
Errors share one shape. Validation errors use status422 and list every bad field so an agent can fix them in one pass: