Whop API key: where to find it and how to get one

Your Whop API key lives on the Developer page of your Whop dashboard (whop.com/dashboard/developer), in the Account API Keys section. Select Create, name the key, copy it immediately and store it on your server: it acts as your whole business.

To connect Whop to WooCommerce you need two values: the API key (secret) and your Account ID (biz_…, formerly called Company ID). Here is how to get both, for sandbox and for live.

How to get a Whop API key, step by step

1. Open the Developer page

Sign in to Whop and open Dashboard → Developer, or go straight to whop.com/dashboard/developer. For testing, use the sandbox dashboard at sandbox.whop.com/dashboard/developer instead. The sandbox needs its own account; your whop.com login doesn’t carry over.

2. Create an Account API key

In Account API Keys, select Create. Give the key a name that says where it’s used, for example WooCommerce – mystore.com. One key per store makes it easy to revoke a single site later.

Whop has two kinds of API keys. You want an Account API key, which authenticates your server as your own business. An App API key is for developers building apps that other Whop businesses install.

3. Choose the permissions

Whop’s quickstart uses the Admin role to get started, then recommends a custom permission set that covers only the endpoints you call before you go to production. Admin works for a first test. Once your store takes payments correctly, narrow the key and run a sandbox payment again to check nothing broke.

4. Copy the key and keep it secret

Copy the key when Whop shows it. Treat it like a bank password:

• never paste it into front-end code, a theme file or a public repository
• never send it by email or in a support chat
• if it leaks, delete it in the dashboard and create a new one

5. Find your Account ID

Your Account ID is the identifier of your Whop business and starts with biz_. Older Whop screens and tutorials call it Company ID: it’s the same value. You’ll find it in your Whop dashboard (it also appears in the dashboard URL).

Where to paste the API key in WooCommerce

1. In WordPress, open WooCommerce → Settings → Payments → Whop.
2. Paste the key into API Key and the biz_… value into Account ID.
3. Leave Sandbox Mode on if you used a sandbox key. Turn it off only with a production key.
4. Save. Then set up the webhook and paste its secret into Webhook Secret: see Whop webhooks.

WhopForWoo stores the key server side. It is never sent to the browser and never written to logs. The plugin only talks to api.whop.com (or sandbox-api.whop.com in sandbox mode) and, for currency conversion, open.er-api.com.

Sandbox key vs live key

The two environments share nothing: accounts, keys, products and webhooks are separate, and the keys look identical. Going live means creating a second key, a second webhook and a second secret on whop.com, then swapping all three values. Never reuse a sandbox value in production. More in Whop sandbox.

“Invalid API key” and other errors

• 401 Unauthorized: the key is wrong, revoked, or from the other environment. Check that Sandbox Mode matches where you created the key.
• 403 Forbidden: the key exists but its permissions don’t cover the call. Widen the permission set, or test with Admin to confirm.
• Payment form doesn’t load: often a cached checkout page rather than the key. Whop → Status & Tools has a checkout cache test.

Other symptoms are covered in Whop payment issues.

Next step

With the key, the Account ID and the webhook secret in place, your WooCommerce checkout can take Whop payments with the form embedded on your own page. The install video (V01) walks through the whole setup in about five minutes.