Whop

Whop

This connector calls the Whop API v1 (https://api.whop.com/api/v1), the current API Whop recommends, with an Account API key sent as Authorization: Bearer. The older v5 and v2 APIs are legacy and not used.

Key types: an Account API key acts as your own business (account biz_...) and is what this connector expects. An App API key acts as an app across every business that installed it; it also works, but then WHOP_ACCOUNT_ID decides which business the account-scoped tools read. OAuth tokens and iframe user tokens are not supported here.

Setup (about 3 minutes)

1. Open https://whop.com/dashboard, pick the business in the business switcher, then Developer > Account API Keys > Create.
2. Permissions: the Admin role covers everything. For a narrower custom set, grant the read permissions of the tools you use: member:basic:read (memberships, members, license keys), access_pass:basic:read (products), plan:basic:read (plans), payment:basic:read (payments), promo_code:basic:read (promo codes), forum:read (forum posts), developer:manage_webhook (webhooks), company:balance:read (whop_get_account), and member:email:read to see member emails. Cancelling needs membership:cancel or member:manage, refunding payment:manage.
3. Copy the key once (it is shown only at creation) into WHOP_API_KEY.
4. WHOP_ACCOUNT_ID is your business id, starting with biz_: it is in the dashboard URL (whop.com/dashboard/biz_.../) and returned as id by whop_get_account.

Which tool

• Catalog: whop_list_products and whop_get_product; whop_list_plans and whop_get_plan for the prices and billing periods (Whop now calls plans variants; ids still start with plan_).
• Customers: whop_list_memberships and whop_get_membership (one purchase or subscription, mem_...), whop_list_members and whop_get_member (one buyer across all their memberships, mber_...), whop_get_user (public profile, user_...), whop_check_user_access (does this user have access to a product, experience or the business?).
• License keys: whop_validate_license_key looks a key up and answers valid (status active, trialing or completed). It does not bind a machine.
• Money: whop_list_payments and whop_get_payment. Amounts are objects such as {"amount": "49.00", "currency": "usd"}.
• Marketing and community: whop_list_promo_codes, whop_list_experiences, whop_list_forum_posts (needs an experience id from whop_list_experiences).
• Developer: whop_list_webhooks (signing secrets are left out).

Writes are off by default: whop_cancel_membership and whop_refund_payment are installed switched off. Enable them in the connector settings only if the AI should cancel or refund. Even then, confirm the exact membership or payment, the amount and the timing with the user first: a refund emails the buyer, claws back the affiliate commission and cannot be undone.

Pagination: list tools return page_info; while has_next_page is true, call again with after = page_info.end_cursor.

Personal data: memberships, members and payments include names, emails (with member:email:read) and phone numbers. Use them only for the user's request.

Common errors

• 401 unauthorized: the key is wrong, deleted or incomplete.
• 403: the key lacks the permission named in the message; add it to the key under Developer > Account API Keys.
• 404: unknown id or license key, or an object of another business.
• 400: an invalid parameter, for example an id with the wrong prefix; the message names it.
• 429: rate limited. Wait and retry once.

Out of scope here: creating or editing products, plans and promo codes, checkout links, payouts, chat and DM messages, apps, ads and financial reports.