headless-checkout-proxy

Proxy VTEX Checkout API calls through a BFF with server-side session and cookie management.

39|9|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/vtexdocs/ai-skills --skill headless-checkout-proxy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: headless-checkout-proxy
Source: https://github.com/vtexdocs/ai-skills/tree/main/tracks/headless/skills/headless-checkout-proxy
Command: npx skills add https://github.com/vtexdocs/ai-skills --skill headless-checkout-proxy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Proxy VTEX Checkout API calls through a secure BFF to centralize orderForm lifecycle management and cookie handling, preventing direct client access to Checkout endpoints.

Core Features & Use Cases

  • BFF-proxied Checkout calls with server-side cookie management
  • OrderForm lifecycle handling: create, fetch, attach profiles, shipping, and payment data
  • 3-step order placement flow (place → pay → process) within a 5-minute window
  • Server-side validation of inputs prior to VTEX API calls
  • Secure handling of CheckoutOrderFormOwnership cookies

Quick Start

Route all cart and checkout actions through the BFF, ensure orderFormId is stored server-side, and validate inputs before forwarding to VTEX.

Frequently Asked Questions about headless-checkout-proxy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure VTEX checkout API calls in a headless storefront?

You can secure VTEX checkout API calls by proxying them through a server-side BFF. This centralizes orderForm lifecycle management and session cookie handling, preventing direct client access to checkout endpoints.

Why do I need a BFF proxy for VTEX orderForm lifecycle management?

A BFF proxy is needed for VTEX orderForm management to store the orderFormId server-side and validate inputs before forwarding requests. This prevents direct client access and centralizes cart creation and item management.

How do I handle CheckoutOrderFormOwnership cookies for VTEX headless checkout?

You handle CheckoutOrderFormOwnership cookies by capturing them for each proxied request through the BFF. The server-side proxy manages these cookies alongside the orderFormId in a secure session.

Can I manage the 3-step order placement flow via a server-side BFF in VTEX?

Yes, you can manage the 3-step order placement flow by routing place, pay, and process actions through a server-side BFF. This flow handles profile, shipping, and payment attachments within a 5-minute window.

Does a headless VTEX storefront require server-side validation for cart and checkout actions?

Yes, a headless VTEX storefront requires server-side validation for cart and checkout actions to secure the orderForm. The BFF validates all inputs prior to forwarding API calls to VTEX.

What is the best way to attach profile and payment data to a VTEX orderForm?

The best way to attach profile and payment data to a VTEX orderForm is routing all attachments through a server-side BFF. This ensures inputs are validated and CheckoutOrderFormOwnership cookies are captured securely.