Purpl Documentation

Authentication

Apply application API credentials and required scopes to server requests.

Bearer authentication

Send the application API credential as a Bearer value in the Authorization header for authenticated endpoints.

cURL

curl 'https://api.purpl.sh/v1/customers/user-123/entitlements' \
  --header 'Authorization: Bearer <application-api-credential>'

Scopes

entitlements:read — Read entitlements for an app account
customers:write — Link a verified store customer to an app account

Public app requests

Purchase synchronization and remote paywall lookup do not use application API credentials. Purpl verifies signed store data or registered app identifiers instead.