Whop API

Whop API

The Whop API is one REST API for taking money in and paying money out: hosted and embedded checkout, plans and subscriptions, invoices, refunds and disputes, payouts and ledgers, identity verification, license keys, and even company formation. Payments cover 195 countries and 100+ payment methods. Official SDKs ship for TypeScript, Python and Ruby, and the same surface is reachable from an MCP server and a CLI.

Base URL: https://api.whop.com/api/v1 · Docs: docs.whop.com · Machine-readable index: docs.whop.com/llms.txt

How to Get a Whop API Key

1. Create an account at whop.com/start. Onboarding creates your first business — the Account that owns API keys, products, webhooks and payments.
2. Open whop.com/dashboard, go to Account API Keys, and select Create.
3. Copy the key when it is shown and store it server-side as WHOP_API_KEY (keys look like whop_xxxxxxxx).

Send it as a bearer token on every request. There are three credential types: Account API keys (your own business), App API keys (accounts that installed your app), and OAuth tokens (act as an individual signed-in user). Keep all of them off the client — never in browser code, mobile apps, or public repos.

First Request

Retrieve the account tied to your key. This confirms the key and permissions work, and returns your account id, which starts with biz_.

curl https://api.whop.com/api/v1/accounts/me \
  -H "Authorization: Bearer $WHOP_API_KEY"

{
  "id": "biz_XXXXXXXX",
  "title": "Acme Studio",
  "route": "acme-studio",
  "status": "approved"
}

Install an SDK

pnpm add @whop/sdk      # TypeScript
pip install whop-sdk    # Python
gem install whop_sdk    # Ruby

TypeScript

import Whop from "@whop/sdk";

const client = new Whop({ apiKey: process.env.WHOP_API_KEY });

const account = await client.accounts.me();
console.log(account.id);

Python

import os
from whop_sdk import Whop

client = Whop(api_key=os.environ["WHOP_API_KEY"])

account = client.accounts.me()
print(account.id)

Ruby

require "whop_sdk"

whop = WhopSDK::Client.new(api_key: ENV.fetch("WHOP_API_KEY"))

account = whop.accounts.me
puts account.id

What You Can Build

Area	What the API covers
Payments	Checkout configurations and sessions, plans, products, one-time and recurring payments, promo codes, payment methods
Invoices	Create, retrieve, update and delete drafts; mark paid or uncollectible; resend the notification email; void permanently
Refunds & disputes	Issue refunds and work disputes through the API
Payouts & money movement	Ledgers, transfers, payouts, payout methods, deposits, swaps, cards and topups — plus a hosted or embedded payout portal for connected accounts
Identity	Hosted KYC and identity verification, with documented accepted document types
Company formation	Form Company starts an LLC or C-Corp formation for a business account — defaults to LLC; set entity_type to c_corp (which also requires share_structure and officer roles)
Community	Embed real-time chat, forums and notifications without running messaging infrastructure
Licensing	License keys to gate downloadable software, CLIs and games

Versioning

Pin a dated version with the Api-Version-Date header so later changes cannot break your integration. The official SDKs send their version automatically.

curl https://api.whop.com/api/v1/accounts/me \
  -H "Authorization: Bearer $WHOP_API_KEY" \
  -H "Api-Version-Date: 2026-06-09"

Prefer the versioned endpoints (under /api-reference/beta, pinned with Api-Version-Date) over Legacy ones. Legacy remains supported, but check API stability before writing new code against it.

Rate Limits and Reliability

• 600 requests per minute, tracked per API operation and per credential. Exceeding it returns 429.
• Idempotency: retry POST requests with an idempotency key so a request is never executed twice.
• Sandbox: test the whole integration in a safe environment before going live.
• Webhooks: receive payment, membership and event notifications in real time.

MCP and CLI

Beyond REST, the same platform is reachable two other ways:

• API MCP server — https://mcp.whop.com/mcp (streamable HTTP) lets an AI assistant list, create and update live Whop resources. It authenticates through a browser sign-in, so no API key goes in the client config.
• Docs MCP server — https://docs.whop.com/mcp searches and reads every documentation page.
• CLI — whop.sh builds and manages Whop apps from the terminal.

Selling on iOS

The iOS Checkout SDK handles in-app purchases and subscriptions natively at 2.7% + $0.30, against Apple's 15–30%.

Read the full API docs →