Quickstart

This walks through the core flow with curl: get an offer for a cart, create a policy for the paid order, then cancel it as if the item were returned. You only send what’s in the cart; Phew classifies each item and decides whether it can be covered.

If you’d rather not build the offer UI yourself, the drop-in SDK and iframe embed render it for you, and you only need the policy step below.

Getting sandbox keys

Phew is in preview with design partners and there is no self-serve dashboard yet. Register your interest and we’ll send sandbox keys and set up a shared channel with your team.

1. Set your key. Sandbox keys start with sk_test_. Keep them on your server; they must never reach a browser or an app.

   export PHEW_KEY=sk_test_...

2. Create an offer. Send the items in the cart. Amounts are integers in minor units, so 4 990 kr is 499000.

   curl https://api.getphew.com/v1/offers \
     -H "Authorization: Bearer $PHEW_KEY" \
     -H "Content-Type: application/json" \
     -H "Idempotency-Key: 7f9d6c1e-cart-81723" \
     -d '{
       "currency": "NOK",
       "market": "NO",
       "items": [
         {
           "reference": "SKU-CBX-48",
           "name": "City Bike Explorer",
           "price": 499000,
           "quantity": 1
         }
       ]
     }'

   The response lists the plans the customer can choose from, with the price and the documents to link to:

   {
     "id": "off_01JD7Q8S4M5W2X3Y4Z6A7B8C9D",
     "object": "offer",
     "currency": "NOK",
     "expires_at": "2026-10-23T14:12:09Z",
     "items": [
       {
         "reference": "SKU-CBX-48",
         "eligible": true,
         "plans": [
           { "id": "plan_12m", "term_months": 12, "premium": 8900, "label": "1 year" },
           { "id": "plan_36m", "term_months": 36, "premium": 29900, "label": "3 years" }
         ]
       }
     ],
     "documents": {
       "terms_url": "https://getphew.com/legal/terms/no-2026-10",
       "ipid_url": "https://getphew.com/legal/ipid/no-2026-10"
     }
   }

3. Show the offer. Display the plan, the price and links to the terms and the IPID. The customer must actively choose it; never pre-select it. See Display requirements.

4. Create the policy once the order is paid:

   curl https://api.getphew.com/v1/policies \
     -H "Authorization: Bearer $PHEW_KEY" \
     -H "Content-Type: application/json" \
     -H "Idempotency-Key: order-100482-policy" \
     -d '{
       "offer": "off_01JD7Q8S4M5W2X3Y4Z6A7B8C9D",
       "order_reference": "100482",
       "items": [{ "reference": "SKU-CBX-48", "plan": "plan_36m" }],
       "customer": {
         "name": "Ingrid Hansen",
         "email": "ingrid@example.com",
         "locale": "nb-NO"
       }
     }'

   You get back one policy per covered item, with "status": "active".

5. Cancel it to simulate a return:

   curl https://api.getphew.com/v1/policies/pol_01JD7QB2.../cancel \
     -H "Authorization: Bearer $PHEW_KEY" \
     -H "Content-Type: application/json" \
     -d '{ "reason": "item_returned" }'

The same flow in code

Node.js

const phew = async (path: string, body: unknown, idempotencyKey?: string) => {
  const response = await fetch(`https://api.getphew.com/v1${path}`, {
    method: "POST",
    headers: {
      Authorization: `Bearer ${process.env.PHEW_KEY}`,
      "Content-Type": "application/json",
      ...(idempotencyKey ? { "Idempotency-Key": idempotencyKey } : {}),
    },
    body: JSON.stringify(body),
  });
  if (!response.ok) throw new Error(`Phew ${response.status}: ${await response.text()}`);
  return response.json();
};

const offer = await phew("/offers", {
  currency: "NOK",
  market: "NO",
  items: [{ reference: "SKU-CBX-48", name: "City Bike Explorer", price: 499000, quantity: 1 }],
});

const policies = await phew(
  "/policies",
  {
    offer: offer.id,
    order_reference: "100482",
    items: [{ reference: "SKU-CBX-48", plan: "plan_36m" }],
    customer: { name: "Ingrid Hansen", email: "ingrid@example.com", locale: "nb-NO" },
  },
  "order-100482-policy",
);

Python

import os
import requests

session = requests.Session()
session.headers["Authorization"] = f"Bearer {os.environ['PHEW_KEY']}"
base = "https://api.getphew.com/v1"

offer = session.post(f"{base}/offers", json={
    "currency": "NOK",
    "market": "NO",
    "items": [{"reference": "SKU-CBX-48", "name": "City Bike Explorer",
               "price": 499000, "quantity": 1}],
}, timeout=10).json()

policies = session.post(f"{base}/policies", json={
    "offer": offer["id"],
    "order_reference": "100482",
    "items": [{"reference": "SKU-CBX-48", "plan": "plan_36m"}],
    "customer": {"name": "Ingrid Hansen", "email": "ingrid@example.com", "locale": "nb-NO"},
}, headers={"Idempotency-Key": "order-100482-policy"}, timeout=10).json()

PHP

$client = new GuzzleHttp\Client([
    'base_uri' => 'https://api.getphew.com/v1/',
    'headers' => ['Authorization' => 'Bearer ' . getenv('PHEW_KEY')],
    'timeout' => 10,
]);

$offer = json_decode($client->post('offers', ['json' => [
    'currency' => 'NOK',
    'market' => 'NO',
    'items' => [[
        'reference' => 'SKU-CBX-48', 'name' => 'City Bike Explorer',
        'price' => 499000, 'quantity' => 1,
    ]],
]])->getBody(), true);

$policies = json_decode($client->post('policies', [
    'headers' => ['Idempotency-Key' => 'order-100482-policy'],
    'json' => [
        'offer' => $offer['id'],
        'order_reference' => '100482',
        'items' => [['reference' => 'SKU-CBX-48', 'plan' => 'plan_36m']],
        'customer' => ['name' => 'Ingrid Hansen', 'email' => 'ingrid@example.com', 'locale' => 'nb-NO'],
    ],
])->getBody(), true);

Next steps

• Subscribe to webhooks so you hear about claims and settlements.
• Read the go-live checklist before requesting live keys.
• If you’re a payment provider or bank, choose your security level.