---
search:
  tags:
    - Sessions
    - POST
seo:
  description: >-
    Canonical V0 endpoint (Decision D2). Creates and starts the session in a
    single… Reference for the POST /v1/sessions endpoint in the AVTR Public API
    v1 API.
sidebar:
  badge: POST
  label: Create AND start a session
title: Create AND start a session
type: openapi-operation
---
Canonical V0 endpoint (Decision D2). Creates and starts the session in a single call. The request body MUST include `provider_type` plus a matching `provider_config` carrying per-session ephemeral provider credentials.

Per-session ephemeral credentials are held in Gateway process memory ONLY for the session lifetime and are zeroed on session end. They are NEVER persisted to the database, KV, R2, DO storage, files, env vars, logs, PostHog, request IDs, or error messages.

Use `Idempotency-Key` to dedupe retry-safe session creation. `provider_connection_id` is REJECTED at the schema level (V0 does not accept managed provider connections).

<Operation source="reference" id="post-v1-sessions" />