Developers

Enviglo API

Record purchases from your game, check who owns what, run codes and customers from your own tools, and let a Discord bot hand out product roles.

1. Make a key

In your store's dashboard: Settings → Integrations → API keys. A key belongs to one store, and you see it once. Keep it on a server.

2. Wire your game

Record developer product purchases from ProcessReceipt, unlock what a player owns when they join, and prompt the purchase from launch data so a buyer who clicked Buy on Enviglo sees it as they load in.

3. Sync Discord

Link your server, give each product a role, and let the bot read /discord/entitlements.

Authentication

Send your key with every request, as Authorization: Bearer evg_live_… or in an x-api-key header. Every address below starts with https://enviglo.com/api/v1, and everything comes back as JSON.

Keys are made in the store’s dashboard, under Settings → Integrations → API keys, by anyone with the Integrations permission. A key belongs to one store and only ever sees that store. Keep it where players can’t reach it: your game’s server scripts, your bot, your backend. Never a LocalScript, a web page or a public repository. If one gets out, revoke it where you made it and make another.

Check a key works

curl "https://enviglo.com/api/v1/store" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Scopes

A key does only what its scopes allow. A new key starts with the four a game or a Discord bot needs; tick the rest when an integration asks for them. A key can't do more than the person who made it, so a scope that changes things needs the same permissions in the store.

products:readOn new keys

Read products. Products, with their Roblox and Discord IDs, drafts included.

Anyone who can make keys can add it.

products:write

Update products. Change stock, and publish or unpublish products.

Needs Edit products, Publish products.

licenses:readOn new keys

Check licenses. Who owns what: check ownership, list and look up licenses.

Anyone who can make keys can add it.

licenses:writeOn new keys

Grant and revoke licenses. Record purchases, grant, revoke, restore and transfer licenses.

Needs Grant licenses, Revoke licenses, Transfer licenses.

customers:read

Read customers. Everyone who owns something from the store, and what they own.

Needs See sales and customers.

codes:read

Read codes. Giveaway codes and how often they've been used.

Needs Giveaway codes.

codes:write

Manage codes. Make giveaway codes, and switch them off or delete them.

Needs Giveaway codes.

requests:read

Read requests. Services, and the requests customers send, with their answers and quotes.

Needs Handle requests.

stats:read

Read stats. Sales, customers and followers over time.

Needs See sales and customers.

discord:readOn new keys

Discord entitlements. Which product roles a Discord member should have.

Anyone who can make keys can add it.

Errors and limits

When something goes wrong, the status says what kind of wrong and the body says exactly what.

Response404

{ "error": "Product not found in this store." }

400

Something in the request is wrong: a missing or malformed parameter, or a body that isn't JSON. The message says which.

401

The key is missing, mistyped or revoked.

403

The key doesn't have the scope this needs, or the store isn't open.

404

It isn't in this store. A key only ever sees its own store.

409

It can't happen as things stand: a product that isn't ready to publish, a code someone already has, a license the player gave away.

429

Too many at once. Wait a moment and try again.

A key can record 300 purchases a minute, make 60 codes an hour, and ask for customer lists and stats 60 times a minute between them. Past that it answers 429 until the time is up. The lookups a game makes when players join have no fixed limit, but ask once per player per server, not on a loop.

Pages

Lists that can run long come a page at a time: licenses, codes and requests. Ask for up to 100 with limit (50 if you don’t). When there’s more, the answer carries nextCursor: send it back as cursor for the next page. A nextCursor of null means you have everything.

Customers are paged by number instead: page=1, page=2 and on, with nextPage saying what’s next.

Every page (Node.js)

// Every active license in the store, a page at a time.
let cursor = null;
do {
  const url = new URL("https://enviglo.com/api/v1/licenses?status=active&limit=100");
  if (cursor) url.searchParams.set("cursor", cursor);
  const response = await fetch(url, { headers: { Authorization: `Bearer ${process.env.ENVIGLO_KEY}` } });
  const page = await response.json();
  for (const license of page.licenses) console.log(license.product.name, license.owner.username);
  cursor = page.nextCursor;
} while (cursor);

All endpoints

Everything the API does. Each links to its details below.

GET/storeThe store this key belongs to, and the scopes the key has. Call it to check a key works.GET/productsThe store's products, sorted by name.GET/products/:idOrSlugOne product, by its Enviglo ID or its slug, with its description.PATCH/products/:idOrSlugChange stock, or publish or unpublish a product.GET/licenses/checkWhether a Roblox player owns one product right now.GET/licenses?robloxId=…Everything a Roblox player owns in the store right now. Call it when they join and unlock the lot.GET/licensesAll the store's licenses, newest first, a page at a time.GET/licenses/:idOne license, with its owner and product.POST/licensesRecord a purchase made in game, or grant a product.DELETE/licenses/:idRevoke a license, after a refund in game say. Downloads and product roles go with it.POST/licenses/:id/restoreGive a revoked license back. The same license returns, with its history.POST/licenses/:id/transferMove a license to someone else. The old owner loses it.GET/customersThe store's customers, the most recent buyers first.GET/customers/:customerOne customer and every license they hold here, revoked ones included.GET/codesThe store's codes, newest first, with how often each was used.POST/codesMake a code. Leave out code and Enviglo makes a readable one.PATCH/codes/:idSwitch a code off, or back on.DELETE/codes/:idDelete a code. Licenses it already gave out stay.GET/servicesThe store's services, drafts included, with the questions each request form asks.GET/requestsRequests customers sent: services, commissions and custom work. Most recently updated first.GET/requests/:idOne request: the customer's answers, every quote, and where it's got to.GET/statsLicenses, customers, followers and views over a period, next to the all-time totals.GET/discord/entitlementsWhich product roles a Discord member should hold, from the Enviglo account they linked.

Store

The store a key belongs to.

GET/storeany scope

The store this key belongs to, and the scopes the key has. Call it to check a key works.

Request

curl "https://enviglo.com/api/v1/store" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "store": {
    "id": "cls9x0", "slug": "kybo", "name": "Kybo", "badges": ["VERIFIED"],
    "robloxPlaceId": "4182724849", "robloxGroupId": "3301", "discordGuildId": "998877665544332211",
    "_count": { "products": 12, "licenses": 3410, "followers": 220 },
    "url": "/s/kybo"
  },
  "scopes": ["products:read", "licenses:read", "licenses:write", "discord:read"]
}

Products

What the store sells, with the Roblox and Discord IDs a game or bot needs.

GET/productsproducts:read

The store's products, sorted by name.

Parameters

statusquery · published | draft | archived | all: Which to include. Published only unless you ask.

Request

curl "https://enviglo.com/api/v1/products" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "products": [
    {
      "id": "clx7a1b2c", "slug": "advanced-admin", "name": "Advanced Admin", "summary": "Moderation for busy servers.",
      "status": "PUBLISHED", "category": "ADMIN", "platform": "ROBLOX",
      "licenseType": "SINGLE", "subscriptionDays": null, "priceCents": null, "robuxPrice": 400,
      "sale": { "normalRobuxPrice": 500, "endsAt": "2026-10-01T00:00:00.000Z" },
      "stock": null, "robloxProductId": "1000001", "robloxGamePassId": null, "robloxPlaceId": "4182724849",
      "discordRoleId": "112233445566778899", "latestVersion": "2.4.0", "activeLicenses": 318,
      "publishedAt": "2025-02-01T00:00:00.000Z", "updatedAt": "2026-09-12T08:30:00.000Z",
      "url": "/s/kybo/advanced-admin"
    }
  ]
}

GET/products/:idOrSlugproducts:read

One product, by its Enviglo ID or its slug, with its description.

Parameters

idOrSlugrequiredpath · string: The product's ID, or the slug from its address.

Request

curl "https://enviglo.com/api/v1/products/advanced-admin" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "product": {
    "id": "clx7a1b2c", "slug": "advanced-admin", "name": "Advanced Admin", "status": "PUBLISHED",
    "description": "Everything you need to run a server…",
    "…": "…"
  }
}

PATCH/products/:idOrSlugproducts:write

Change stock, or publish or unpublish a product.

Publishing checks the product is ready, the same as the dashboard does, and answers 409 with what's missing when it isn't.

Parameters

stockbody · integer | null: How many are left. It counts down with each purchase; null means unlimited.
statusbody · PUBLISHED | DRAFT: Put it on the storefront, or take it off.

Request

curl -X PATCH "https://enviglo.com/api/v1/products/advanced-admin" \
  -H "Authorization: Bearer $ENVIGLO_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "stock": 25 }'

Response200

{ "product": { "id": "clx7a1b2c", "stock": 25, "status": "PUBLISHED", "…": "…" } }

Licenses

Who owns what. Games record purchases here and check ownership when a player joins.

GET/licenses/checklicenses:read

Whether a Roblox player owns one product right now.

An expired subscription doesn't count. Check banned before offering a purchase: a banned player never owns anything here. For a product bought more than once, copies is how many they hold: each purchase is a license of its own.

Parameters

robloxIdrequiredquery · string: The player's Roblox user ID.
productIdquery · string: The product's Enviglo ID, or…
robloxProductIdquery · string: …its developer product ID.

Request

curl "https://enviglo.com/api/v1/licenses/check?robloxId=1002&robloxProductId=1000001" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "owned": true,
  "banned": false,
  "copies": 1,
  "product": { "id": "clx7a1b2c", "name": "Advanced Admin", "licenseType": "SINGLE" },
  "license": { "id": "clx8f2k0a0001", "source": "ROBLOX_PURCHASE", "quantity": 1, "expiresAt": null, "createdAt": "2026-09-18T04:12:09.000Z" }
}

GET/licenses?robloxId=…licenses:read

Everything a Roblox player owns in the store right now. Call it when they join and unlock the lot.

Licenses belong to Enviglo accounts: these are the ones on the account the player's Roblox ID is linked to. A product bought more than once appears once per purchase. A banned player comes back with banned: true and no licenses.

Parameters

robloxIdrequiredquery · string: The player's Roblox user ID. Licenses on the Enviglo account they linked count too.

Request

curl "https://enviglo.com/api/v1/licenses?robloxId=1002" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "robloxId": "1002",
  "banned": false,
  "licenses": [
    {
      "id": "clx8f2k0a0001", "source": "ROBLOX_PURCHASE", "status": "ACTIVE", "quantity": 1, "expiresAt": null, "createdAt": "2026-09-18T04:12:09.000Z",
      "product": { "id": "clx7a1b2c", "slug": "advanced-admin", "name": "Advanced Admin", "robloxProductId": "1000001", "discordRoleId": null, "licenseType": "SINGLE" }
    }
  ]
}

GET/licenseslicenses:read

All the store's licenses, newest first, a page at a time.

Parameters

statusquery · active | revoked: Only these. Both unless you ask.
productIdquery · string: Only this product's.
customerquery · string: Only this customer's, by the key /customers gives them.
sincequery · ISO date: Only those issued on or after this.
limitquery · 1–100: Page size. 50 unless you ask.
cursorquery · string: The nextCursor from the page before.

Request

curl "https://enviglo.com/api/v1/licenses?status=active&limit=2" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "licenses": [
    {
      "id": "clx8f2k0a0001",
      "status": "ACTIVE",
      "source": "ROBLOX_PURCHASE",
      "quantity": 1,
      "expiresAt": null,
      "createdAt": "2026-09-18T04:12:09.000Z",
      "revokedAt": null,
      "owner": { "customer": "u_4kq8", "userId": "u_4kq8", "username": "aurora", "robloxId": "1002" },
      "product": { "id": "clx7a1b2c", "slug": "advanced-admin", "name": "Advanced Admin", "robloxProductId": "1000001", "robloxGamePassId": null }
    }
  ],
  "nextCursor": "clx8f2k0a0001"
}

GET/licenses/:idlicenses:read

One license, with its owner and product.

Request

curl "https://enviglo.com/api/v1/licenses/clx8f2k0a0001" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "license": {
    "id": "clx8f2k0a0001",
    "status": "ACTIVE",
    "source": "ROBLOX_PURCHASE",
    "quantity": 1,
    "expiresAt": null,
    "createdAt": "2026-09-18T04:12:09.000Z",
    "revokedAt": null,
    "owner": { "customer": "u_4kq8", "userId": "u_4kq8", "username": "aurora", "robloxId": "1002" },
    "product": { "id": "clx7a1b2c", "slug": "advanced-admin", "name": "Advanced Admin", "robloxProductId": "1000001", "robloxGamePassId": null }
  }
}

POST/licenseslicenses:write

Record a purchase made in game, or grant a product.

The license goes on the Enviglo account the player's Roblox ID is linked to; a player who hasn't joined Enviglo gets a placeholder account, which becomes theirs when they link Roblox. Every payment is kept as a purchase. Idempotent: the same receiptId returns what it did the first time. A one-purchase product a player already owns keeps the license they have; each purchase of a product bought more than once is a license of its own; a subscription adds its days. A player whose license was revoked, or who gave it away, gets a new one by buying again. A banned player's purchase is recorded but revoked (banned: true), so you can still mark the receipt processed. Answers 201 when it made a license.

Parameters

robloxIdrequiredbody · string: The buyer's Roblox user ID.
robloxProductIdbody · string: The developer product bought, or…
productIdbody · string: …the product's Enviglo ID.
receiptIdbody · string: ProcessReceipt's PurchaseId. Leave it out for game passes: they're recorded once per player.
robuxSpentbody · integer: ProcessReceipt's CurrencySpent, kept on the purchase so the store sees what was paid.
placeIdbody · string: ProcessReceipt's PlaceIdWherePurchased.
sourcebody · ROBLOX_PURCHASE | GRANT: GRANT for one you're giving away. ROBLOX_PURCHASE unless you say.

Request

curl -X POST "https://enviglo.com/api/v1/licenses" \
  -H "Authorization: Bearer $ENVIGLO_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "robloxId": "1002", "robloxProductId": "1000001", "receiptId": "a1b2c3d4", "robuxSpent": 400, "placeId": "4182724849" }'

Response201

{
  "created": true, "added": false, "renewed": false,
  "license": { "id": "clx8f2k0a0001", "source": "ROBLOX_PURCHASE", "status": "ACTIVE", "quantity": 1, "expiresAt": null, "createdAt": "2026-09-18T04:12:09.000Z" },
  "discordRoleId": null
}

DELETE/licenses/:idlicenses:write

Revoke a license, after a refund in game say. Downloads and product roles go with it.

Request

curl -X DELETE "https://enviglo.com/api/v1/licenses/clx8f2k0a0001" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{ "revoked": true, "licenseId": "clx8f2k0a0001" }

POST/licenses/:id/restorelicenses:write

Give a revoked license back. The same license returns, with its history.

Request

curl -X POST "https://enviglo.com/api/v1/licenses/clx8f2k0a0001/restore" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "restored": true,
  "license": {
    "id": "clx8f2k0a0001",
    "status": "ACTIVE",
    "source": "ROBLOX_PURCHASE",
    "quantity": 1,
    "expiresAt": null,
    "createdAt": "2026-09-18T04:12:09.000Z",
    "revokedAt": null,
    "owner": { "customer": "u_4kq8", "userId": "u_4kq8", "username": "aurora", "robloxId": "1002" },
    "product": { "id": "clx7a1b2c", "slug": "advanced-admin", "name": "Advanced Admin", "robloxProductId": "1000001", "robloxGamePassId": null }
  }
}

POST/licenses/:id/transferlicenses:write

Move a license to someone else. The old owner loses it.

Parameters

robloxIdbody · string: The new owner's Roblox user ID, or…
usernamebody · string: …their Enviglo username.

Request

curl -X POST "https://enviglo.com/api/v1/licenses/clx8f2k0a0001/transfer" \
  -H "Authorization: Bearer $ENVIGLO_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "robloxId": "2048" }'

Response200

{
  "transferred": true,
  "license": {
    "id": "clx8f2k0a0001",
    "owner": { "customer": "roblox-2048", "userId": null, "username": null, "robloxId": "2048" },
    "…": "…"
  }
}

Customers

Everyone who owns something from the store: one entry per person, however their licenses were recorded.

GET/customerscustomers:read

The store's customers, the most recent buyers first.

Parameters

statusquery · active | all: all includes people whose licenses were all revoked.
pagequery · integer: Which page, from 1. Customers are paged by number, and nextPage says what's next.
limitquery · 1–100: Page size. 50 unless you ask.

Request

curl "https://enviglo.com/api/v1/customers" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "customers": [
    {
      "customer": "u_4kq8", "userId": "u_4kq8", "username": "aurora", "robloxIds": ["1002"], "licenses": 4,
      "firstAt": "2022-05-13T02:00:00.000Z", "lastAt": "2026-09-18T04:12:09.000Z", "banned": false
    }
  ],
  "nextPage": 2
}

GET/customers/:customercustomers:read

One customer and every license they hold here, revoked ones included.

Parameters

customerrequiredpath · string: The key /customers gives them: their Enviglo user ID, or roblox-<id> for a player who hasn't joined Enviglo.

Request

curl "https://enviglo.com/api/v1/customers/u_4kq8" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "customer": { "customer": "u_4kq8", "userId": "u_4kq8", "username": "aurora", "robloxId": null, "banned": false, "bannedAt": null },
  "licenses": [ { "id": "clx8f2k0a0001", "status": "ACTIVE", "…": "…" } ]
}

Giveaway codes

Codes that give a product away: for giveaways, collaborators, and putting things right.

GET/codescodes:read

The store's codes, newest first, with how often each was used.

Parameters

limitquery · 1–100: Page size. 50 unless you ask.
cursorquery · string: The nextCursor from the page before.

Request

curl "https://enviglo.com/api/v1/codes" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "codes": [
    {
      "id": "clc1", "code": "KYBO-FALL-2026", "note": "Stream giveaway", "maxUses": 50, "uses": 12, "days": null, "expiresAt": null,
      "active": true, "disabledAt": null, "createdAt": "2026-09-10T00:00:00.000Z",
      "product": { "id": "clx7a1b2c", "slug": "advanced-admin", "name": "Advanced Admin" }
    }
  ],
  "nextCursor": null
}

POST/codescodes:write

Make a code. Leave out code and Enviglo makes a readable one.

Codes are unique across Enviglo, so one that's taken answers 409.

Parameters

productIdrequiredbody · string: The product it gives.
codebody · string: 4–32 letters, numbers and dashes.
maxUsesbody · integer | null: How many people can use it. Unlimited if left out.
daysbody · integer | null: For subscriptions: how many days it gives.
expiresAtbody · ISO date: When it stops working.
notebody · string: For you: what it's for.

Request

curl -X POST "https://enviglo.com/api/v1/codes" \
  -H "Authorization: Bearer $ENVIGLO_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "productId": "clx7a1b2c", "maxUses": 50, "note": "Stream giveaway" }'

Response201

{ "code": { "id": "clc1", "code": "Q7KD-2MPX-9HRT", "maxUses": 50, "uses": 0, "active": true, "…": "…" } }

PATCH/codes/:idcodes:write

Switch a code off, or back on.

Parameters

activerequiredbody · boolean: false to switch it off.

Request

curl -X PATCH "https://enviglo.com/api/v1/codes/clc1" \
  -H "Authorization: Bearer $ENVIGLO_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "active": false }'

Response200

{ "code": { "id": "clc1", "active": false, "disabledAt": "2026-09-19T08:00:00.000Z", "…": "…" } }

DELETE/codes/:idcodes:write

Delete a code. Licenses it already gave out stay.

Request

curl -X DELETE "https://enviglo.com/api/v1/codes/clc1" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{ "deleted": true, "id": "clc1" }

Services and requests

Work the store takes on to order, and the requests customers send for it.

GET/servicesrequests:read

The store's services, drafts included, with the questions each request form asks.

Request

curl "https://enviglo.com/api/v1/services" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "services": [
    {
      "id": "csv1", "slug": "aircraft-livery", "name": "Aircraft livery", "summary": "Your airline's colours on any of our planes.",
      "status": "PUBLISHED", "paused": false, "fromPriceCents": 4500, "turnaroundDays": 5, "payment": "HELD",
      "url": "/s/kybo/services/aircraft-livery",
      "questions": [
        { "id": "details", "type": "paragraph", "label": "What do you need?", "required": true },
        { "id": "fq1", "type": "choice", "label": "Which airline?", "required": true, "options": ["Qantas", "Delta"] }
      ]
    }
  ]
}

GET/requestsrequests:read

Requests customers sent: services, commissions and custom work. Most recently updated first.

Parameters

statusquery · active | all | a status: Active ones unless you ask: OPEN, QUOTED, ACCEPTED, IN_PROGRESS and DELIVERED. Or one of those, COMPLETED, DECLINED or CANCELLED.
serviceIdquery · string: Only requests for this service.
limitquery · 1–100: Page size. 50 unless you ask.
cursorquery · string: The nextCursor from the page before.

Request

curl "https://enviglo.com/api/v1/requests" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "requests": [
    {
      "id": "crq1", "title": "Aircraft livery", "status": "QUOTED", "priceCents": null, "dueAt": null, "paymentStatus": "NONE",
      "customer": { "customer": "u_4kq8", "userId": "u_4kq8", "username": "aurora" },
      "service": { "id": "csv1", "slug": "aircraft-livery", "name": "Aircraft livery" }, "product": null,
      "answers": [ { "question": "Which airline?", "answer": "Qantas" } ],
      "quotes": [ { "id": "cq1", "amountCents": 12000, "dueAt": "2026-10-03T00:00:00.000Z", "status": "OPEN", "note": "Full livery plus the tail", "response": null } ],
      "createdAt": "2026-09-19T01:00:00.000Z", "updatedAt": "2026-09-19T02:00:00.000Z"
    }
  ],
  "nextCursor": null
}

GET/requests/:idrequests:read

One request: the customer's answers, every quote, and where it's got to.

Request

curl "https://enviglo.com/api/v1/requests/crq1" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{ "request": { "id": "crq1", "title": "Aircraft livery", "status": "IN_PROGRESS", "priceCents": 12000, "…": "…" } }

Stats

How the store is doing.

GET/statsstats:read

Licenses, customers, followers and views over a period, next to the all-time totals.

Parameters

daysquery · 7–365: How far back. 30 unless you ask.

Request

curl "https://enviglo.com/api/v1/stats?days=30" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "days": 30,
  "since": "2026-08-20T00:00:00.000Z",
  "licenses": { "issued": 142, "bySource": { "ROBLOX_PURCHASE": 131, "GRANT": 11 }, "perDay": [ { "date": "2026-09-18", "count": 7 } ], "active": 3410 },
  "customers": { "total": 2210, "new": 96 },
  "followers": { "total": 220, "new": 14 },
  "views": 5120,
  "publishedProducts": 12
}

Discord

For a bot that hands out product roles.

GET/discord/entitlementsdiscord:read

Which product roles a Discord member should hold, from the Enviglo account they linked.

Without discordUserId it answers with every product that has a role, as { guildId, roles: [{ id, slug, name, discordRoleId }] }, so a bot can reconcile the whole server.

Parameters

discordUserIdquery · string: The member's Discord ID.

Request

curl "https://enviglo.com/api/v1/discord/entitlements?discordUserId=123456789012345678" \
  -H "Authorization: Bearer $ENVIGLO_KEY"

Response200

{
  "guildId": "998877665544332211",
  "linked": true,
  "username": "aurora",
  "roles": ["112233445566778899"],
  "products": [ { "id": "clx7a1b2c", "slug": "advanced-admin", "name": "Advanced Admin", "discordRoleId": "112233445566778899" } ]
}

Roblox example

Turn on HTTP requests in Game Settings → Security, then put this in ServerScriptService.

EnvigloReceipts.server.lua

-- ServerScriptService/EnvigloReceipts.server.lua
local HttpService = game:GetService("HttpService")
local MarketplaceService = game:GetService("MarketplaceService")

local BASE = "https://enviglo.com/api/v1"
local KEY = "evg_live_…" -- keep this in a private module or a secret, never in a LocalScript

local function request(method, path, body)
	local response = HttpService:RequestAsync({
		Url = BASE .. path,
		Method = method,
		Headers = { ["Authorization"] = "Bearer " .. KEY, ["Content-Type"] = "application/json" },
		Body = body and HttpService:JSONEncode(body) or nil,
	})
	return response.Success, HttpService:JSONDecode(response.Body)
end

-- Record developer product purchases as Enviglo licenses.
MarketplaceService.ProcessReceipt = function(receipt)
	local ok = request("POST", "/licenses", {
		robloxId = tostring(receipt.PlayerId),
		robloxProductId = tostring(receipt.ProductId),
		receiptId = receipt.PurchaseId,
		robuxSpent = receipt.CurrencySpent,
		placeId = tostring(receipt.PlaceIdWherePurchased),
	})
	-- Any success means Enviglo has the purchase on record, including a receipt it already had.
	if ok then
		return Enum.ProductPurchaseDecision.PurchaseGranted
	end
	return Enum.ProductPurchaseDecision.NotProcessedYet
end

-- Unlock everything a player already owns when they join.
game.Players.PlayerAdded:Connect(function(player)
	local ok, data = request("GET", "/licenses?robloxId=" .. player.UserId)
	if ok then
		for _, license in ipairs(data.licenses) do
			print(player.Name .. " owns " .. license.product.name)
		end
	end
end)

-- "Buy on Roblox" opens your place with launch data like "enviglo:buy:<developerProductId>".
-- Prompt it as they load in and the thing they clicked is waiting for them.
game.Players.PlayerAdded:Connect(function(player)
	local launch = player:GetJoinData().LaunchData
	local productId = launch and tonumber(launch:match("^enviglo:buy:(%d+)$"))
	if not productId then
		return
	end
	-- Launch data is visible and editable by the player, so treat it only as "offer this", never as "they own it".
	-- What they actually receive is decided by ProcessReceipt above.
	task.defer(function()
		local ok, err = pcall(function()
			MarketplaceService:PromptProductPurchase(player, productId)
		end)
		if not ok then
			warn("Enviglo: could not prompt purchase", err)
		end
	end)
end)

Webhooks

Add endpoints under Settings → Integrations. Enviglo sends JSON to them within seconds of an event. A delivery that fails is tried again up to five more times over about eight hours, and an endpoint that fails 25 times in a row is paused. Every request is signed, so you can turn away anything that didn’t come from Enviglo.

LICENSE_GRANTED

A purchase was recorded or a license was granted.

LICENSE_REVOKED

A license was revoked or restored.

LICENSE_TRANSFERRED

A license moved to a new owner.

LICENSE_EXPIRED

A subscription ran out, so its owner no longer has access.

PRODUCT_PUBLISHED

A product went live or was unpublished.

PRODUCT_UPDATED

Product details were saved.

FILE_UPLOADED

A new file version is available.

REVIEW_POSTED

A customer posted or updated a review.

Request

POST https://example.com/enviglo
Content-Type: application/json
X-Enviglo-Event: LICENSE_GRANTED
X-Enviglo-Delivery: 7c1e…            // unique per delivery
X-Enviglo-Timestamp: 1758087600      // unix seconds
X-Enviglo-Signature: v1=<hex HMAC-SHA256 of "<timestamp>.<raw body>">

{
  "id": "7c1e…",
  "event": "LICENSE_GRANTED",
  "createdAt": "2026-09-17T05:00:00.000Z",
  "data": {
    "license": { "id": "…", "status": "ACTIVE", "source": "ROBLOX_PURCHASE", "owner": { "userId": "…", "username": "aurora", "robloxId": "1002" } },
    "product": { "id": "…", "slug": "advanced-admin", "name": "Advanced Admin", "robloxProductId": "1000001", "discordRoleId": null },
    "via": "api"
  }
}

Checking the signature (Node.js)

import { createHmac, timingSafeEqual } from "node:crypto";

export function verifyEnviglo(rawBody, headers, secret) {
  const timestamp = headers["x-enviglo-timestamp"];
  const expected = createHmac("sha256", secret).update(`${timestamp}.${rawBody}`).digest("hex");
  const given = String(headers["x-enviglo-signature"] ?? "").replace(/^v1=/, "");
  const fresh = Math.abs(Date.now() / 1000 - Number(timestamp)) < 300; // 5 minutes
  return fresh && given.length === expected.length && timingSafeEqual(Buffer.from(given), Buffer.from(expected));
}

Purchases and license types

Recording is safe to repeat: the same receiptId returns what it did the first time. Licenses belong to Enviglo accounts, on the account the player’s Roblox ID is linked to; a player who hasn’t joined gets a placeholder account that becomes theirs when they link Roblox. Every payment is kept as a purchase, which never changes. Your game is the only source of Roblox purchases: for game passes, check UserOwnsGamePassAsync when a player joins and record it (no receiptId needed; Enviglo records a pass once per player). Registering a pass again doesn’t undo a revoke, or bring back a license the player gave away.

Each product has a license type. One purchase: a player owns it once, and buying again while they do adds nothing. Buy more than once: every purchase is a license of its own, and check’s copies says how many they hold. Subscription: every new receiptId adds the product’s days (license.expiresAt), counted from the current end if it hasn’t passed; once it runs out, check answers owned: false until the player buys again. Whatever the type, a player whose license was revoked or given away gets a new one by buying again. Game passes can only be one-purchase products.

Open your dashboard →