Use cases
- Create a checkout configuration
- Onboard sub-merchants
- Verify your platform account
- Programmatically pay out users
- Generate payout onboarding links for your sub-merchants
Troubleshoot API requests
Debug authentication failures, permission errors, retryable responses, and sandbox/production mismatches.
API keys
Account API keys
Account API keys
Use Account API keys when you only want to fetch data or perform actions for your own Account
and connected accounts.
- Follow the Quickstart API key steps and open Account API Keys.
- Select Create in the Account API Keys section.
- Give your API key a name, such as
Data pipelineorGHL Integration. - Select a role or a custom set of permissions. You can update the key and add permissions later.
- Create the API key, and copy it from the modal.
App API keys
App API keys
Use app API keys when you are building an app and need to access data on companies that have installed your app.
- Open your dashboard and choose the business that owns the app.
- Open Developer → Apps.
- Select Create app and give the app a name, or select an existing app.
- On App details, find Get started → Set up your local environment.
- Use the copy button in Copy these environment variables to copy the real
WHOP_API_KEY, then store it securely. You will need it to make API calls on behalf of the app.
This
WHOP_API_KEY is the app’s API credential. It’s different from the runtime secrets managed by whop apps secrets, which are arbitrary key-value environment bindings for your hosted code.OAuth tokens
OAuth tokens
Use OAuth tokens when you want users to sign in with their Whop account and grant your app permission to act on their behalf. Unlike API keys which use your app’s permissions, OAuth tokens are scoped to what each individual user can access.Common use cases:
- “Sign in with Whop” authentication
- Accessing a user’s memberships, purchases, or profile
- Performing actions as a specific user (not as your app)
- Redirect users to Whop’s authorization page
- User logs in and approves your requested scopes
- Exchange the authorization code for access and refresh tokens
- Use the access token as your API key in SDK calls or the
Authorizationheader
Making API calls
The public API is available athttps://api.whop.com/api/v1.
Use curl to test the API by fetching your public user profile data:
Authorization header using the Bearer scheme:
SDK reference
MCP
You can also access the API through the Whop Model Context Protocol server athttps://mcp.whop.com/mcp (Cursor) or https://mcp.whop.com/sse (Claude).
Learn more here
