Quickstart

Three steps: create a checkout session, receive the grant webhook, and read entitlements. You need just two credentials — a secret key and a webhook signing secret — from your product's page in the dashboard.

1. Get your credentials

• ELIXPO_PAY_API_KEY — your app's secret key. Authenticates the checkout and entitlements APIs (shown once on creation; roll it from the product page).
• ELIXPO_PAY_WEBHOOK_SECRET — the per-app signing secret (whsec_…) you verify inbound webhooks with. Set your webhook URL and reveal it under Entitlement webhook.

There is no shared handoff secret — the secret key both starts checkout and reads entitlements.

2. Create a checkout session

Call the API with your secret key and redirect the buyer to the returned URL. Elixpo Pay resolves the price from your catalog, so the amount is never sent by you and can't be tampered with.

// In your app (server-side), when a user upgrades:
const res = await fetch("https://payouts.elixpo.com/v1/checkout/sessions", {
  method: "POST",
  headers: {
    Authorization: "Bearer " + process.env.ELIXPO_PAY_API_KEY,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    tier: "member",                 // the product tier
    currency: "INR",                // we resolve the catalog price
    customer: { uid: user.id, email: user.email },
    success_url: "https://blogs.elixpo.com/settings",
  }),
});

const session = await res.json();
redirect(session.url); // hosted checkout — no card data touches your app

3. Read entitlements

After a successful payment we push a webhook (see Webhooks). You can also pull the current state at any time:

// After payment, read the entitlement any time:
const res = await fetch(
  "https://payouts.elixpo.com/v1/entitlements?app=lixblogs&uid=" + user.id,
  { headers: { Authorization: "Bearer " + process.env.ELIXPO_PAY_API_KEY } }
);
const ent = await res.json();
// { app, uid, tier, status, active, expires_at, version }