Skip to main content
GET
JavaScript

Authorizations

Authorization
string
header
required

An Account API key, account-scoped JWT, App API key, or user OAuth token. Prepend the key or token with Bearer, for example Bearer ***************************.

Headers

Api-Version-Date
string

Pins the request to a dated API version.

Example:

"2026-08-05-1"

Path Parameters

id
string
required

App ID (prefixed app_), the app's claimed route, or its proxy domain id.

Response

app retrieved

account
object
required

The account that owns the app.

api_key
object | null
required

Legacy app API key used to authenticate requests on the app's behalf. null when no key exists or the caller lacks the developer:manage_api_key permission.

app_store_description
string | null
required

Detailed description shown on the app store's in-depth app page, or null when none has been set.

app_type
enum<string>
required

The type of end-user the app is built for.

Available options:
b2b_app,
b2c_app,
company_app,
component,
website
Example:

"b2b_app"

base_url
string | null
required

Production base URL where the app is hosted, or null if none is configured.

creator
object
required

The user who owns the publishing account.

dashboard_path
string | null
required

URL path for the account dashboard view, or null when not configured.

default_api_key
object | null
required

The app's default API key. null when the app has no default key or the caller lacks the developer:manage_api_key permission; secret_key is additionally null unless the caller could have created the key themselves.

description
string | null
required

Short description shown in listings and search results, or null if none has been set.

discover_path
string | null
required

URL path for the discover view, or null when not configured.

domain_id
string
required

Subdomain identifier for the app's proxied URL, forming https://{domain_id}.apps.whop.com.

experience_path
string | null
required

URL path for the member-facing hub view, or null when not configured.

hosted_url
string | null
required

Full URL where the app's hosted web build is served, or null if no route is claimed.

icon
object
required

The app's icon. Falls back to the default app icon when none is uploaded.

id
string
required

App ID, prefixed app_.

marketplace_status
enum<string> | null
required

Approval status of the app's product listing on the Whop app store, or null when the app has no associated product.

Available options:
not_available,
pending_review,
live_marketplace,
null
Example:

"not_available"

name
string
required

Display name shown on the app store and in experience navigation.

oauth_client_type
enum<string>
required

How the app authenticates at the OAuth token endpoint.

Available options:
public,
confidential
Example:

"public"

openapi_path
string | null
required

URL path to the app's OpenAPI spec file, or null when not configured.

origin
string | null
required

Full origin URL of the app's proxied domain, for example https://ab1c2d3e4f.apps.whop.com.

product_id
string | null
required

ID of the app's product listing on the Whop app store, or null when the app has no associated product.

production_android_build
object | null
required

The approved build currently served on Android, or null when none is deployed.

production_ios_build
object | null
required

The approved build currently served on iOS, or null when none is deployed.

production_web_build
object | null
required

The approved build currently served on web, or null when none is deployed.

redirect_uris
string[]
required

Whitelisted OAuth callback URLs users are redirected to after authorizing the app.

requested_permissions
object[]
required
required_scopes
enum<string>[]
required

Scopes the app asks a user to grant when they authorize it, shown on the consent screen.

Available options:
read_user
route
string | null
required

Claimed subdomain route where hosted web builds are served (myapp for myapp.whop.app), or null if no route is claimed.

secrets
object | null
required

The app's production secrets as an object of string values, injected into the hosted server runtime. null when the caller lacks the developer:update_app permission.

skills_path
string | null
required

URL path to the app's skills directory, or null when not configured.

status
enum<string>
required

Visibility on the Whop app store: live is publicly discoverable, unlisted is accessible only via direct link, hidden is not visible anywhere.

Available options:
live,
unlisted,
hidden
Example:

"live"

verified
boolean
required

Whether the app has been verified by Whop and is eligible for the featured apps section.