curl --request POST \
  --url https://api.machines.cash/user/v1/cards/secrets/session \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{}'

{
  "ok": true,
  "data": {},
  "summary": "success"
}