API reference | Creativemark Developers

POST /api/v1/stores/<store_slug>/iap/validate/

Validate an App Store or Google Play receipt, create an order, and allocate license keys. Idempotent — re-submitting the same transaction_id returns the existing order.

Authentication: Bearer token (Store API Key)

Request Body (JSON)

{
  "platform": "ios",          // "ios" or "android"
  "receipt_data": "MIIbkg...",  // Base64 receipt (iOS) or purchase token (Android)
  "transaction_id": "1000000123456789",
  "product_id": "com.myapp.premium",  // App Store / Play Store product ID
  "sku": "PREMIUM-KEY",       // Your platform product SKU
  "customer_email": "user@example.com"
}

Response (200 OK)

{
  "ok": true,
  "order_id": "ORD-ABCD1234",
  "status": "fulfilled",
  "iap_receipt_id": "uuid...",
  "keys": [
    {"sku": "PREMIUM-KEY", "key_masked": "PREM-****-5678", "quantity": 1}
  ]
}

Supported Platforms

Platform	Validation	Notes
`ios`	Apple verifyReceipt API	Auto-falls back to sandbox for testing
`android`	Google Play Developer API	Requires service account credentials

In-app purchases