The sales machinery layer, fully scriptable.

https://api.gocushy.com/api/v1

curl https://api.gocushy.com/api/v1/me \
  -H "Authorization: Bearer gc_your_key"

{
  "account": {
    "id": "01J2QJ3M8XN4V6T9R3E7M1B0CD",
    "name": "Acme Courses",
    "email": "sam@example.com",
    "plan": "founding",
    "stripe_connected": true
  }
}

GOCUSHY_API_KEY=gc_your_key npx -y @gocushy/mcp

{
  "mcpServers": {
    "gocushy": {
      "command": "npx",
      "args": ["-y", "@gocushy/mcp"],
      "env": { "GOCUSHY_API_KEY": "gc_your_key" }
    }
  }
}

curl -X POST https://api.gocushy.com/api/v1/products \
  -H "Authorization: Bearer gc_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Launch Course",
    "description": "The complete 6-module launch system.",
    "price_cents": 4900,
    "currency": "usd",
    "delivery_url": "https://members.example.com/launch-course",
    "delivery_note": "Log in with the email you purchased with."
  }'

{
  "product": {
    "id": "01J2QK5W8XN4V6T9R3E7M1B0AA",
    "name": "Launch Course",
    "description": "The complete 6-module launch system.",
    "price_cents": 4900,
    "currency": "usd",
    "type": "one_time",
    "interval": null,
    "delivery_url": "https://members.example.com/launch-course",
    "delivery_note": "Log in with the email you purchased with.",
    "created_at": "2026-08-01T09:30:00.000000Z"
  }
}

curl -X POST https://api.gocushy.com/api/v1/offers \
  -H "Authorization: Bearer gc_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Launch Course",
    "product_id": "01J2QK5W8XN4V6T9R3E7M1B0AA",
    "bump_product_id": "01J2QK5W8XN4V6T9R3E7M1B0BB",
    "bump_headline": "Add the workbook — printable worksheets for every module",
    "upsell_product_id": "01J2QK5W8XN4V6T9R3E7M1B0CC",
    "upsell_headline": "Upgrade: three live group coaching calls",
    "commission_bps": 3000,
    "checkout": {
      "headline": "Launch your course in 30 days",
      "subheadline": "The exact system, module by module — no theory.",
      "bullets": [
        "Six modules, one launch plan",
        "Swipe files for every email",
        "Lifetime updates included"
      ],
      "testimonials": [
        {
          "quote": "Paid for itself in the first week.",
          "name": "Mia T.",
          "role": "Course creator"
        }
      ],
      "guarantee": {
        "title": "30-day money-back guarantee",
        "body": "Email us within 30 days for a full refund — no forms, no calls."
      },
      "deadline": "2026-08-15T23:59:00Z",
      "button_text": "Get instant access",
      "accent": "#1a8a60"
    }
  }'

{
  "offer": {
    "id": "01J2QN7B2XN4V6T9R3E7M1B0DD",
    "name": "Launch Course",
    "slug": "launch-course",
    "status": "live",
    "checkout_url": "https://gocushy.com/c/01J2QJ3M8XN4V6T9R3E7M1B0CD/launch-course",
    "cush_link": "https://cush.link/k3x9f2",
    "product": { "id": "01J2QK5W8XN4V6T9R3E7M1B0AA", "name": "Launch Course", "price_cents": 4900 },
    "bump_product": { "id": "01J2QK5W8XN4V6T9R3E7M1B0BB", "name": "Launch Workbook", "price_cents": 1700 },
    "bump_headline": "Add the workbook — printable worksheets for every module",
    "upsell_product": { "id": "01J2QK5W8XN4V6T9R3E7M1B0CC", "name": "Group Coaching", "price_cents": 9900 },
    "upsell_headline": "Upgrade: three live group coaching calls",
    "checkout_blocks": { "headline": "Launch your course in 30 days", "…": "…" }
  }
}

curl "https://api.gocushy.com/api/v1/orders?limit=2" \
  -H "Authorization: Bearer gc_your_key"

{
  "orders": [
    {
      "id": "01J2QP8XN4V6T9R3E7M1B0CDEE",
      "kind": "purchase",
      "status": "paid",
      "buyer_email": "buyer@example.com",
      "buyer_country": "NZ",
      "currency": "usd",
      "subtotal_cents": 6600,
      "tax_cents": 990,
      "total_cents": 7590,
      "refunded_cents": 0,
      "bump_taken": true,
      "upsell_taken": false,
      "invoice_number": "ACME-0042",
      "offer": { "id": "01J2QN7B2XN4V6T9R3E7M1B0DD", "name": "Launch Course", "slug": "launch-course" },
      "created_at": "2026-08-01T10:13:58.000000Z"
    }
  ]
}

curl -X POST https://api.gocushy.com/api/v1/orders/01J2QP8XN4V6T9R3E7M1B0CDEE/refund \
  -H "Authorization: Bearer gc_your_key" \
  -H "Content-Type: application/json" \
  -d '{ "amount_cents": 1700 }'

{
  "order": {
    "id": "01J2QP8XN4V6T9R3E7M1B0CDEE",
    "status": "partially_refunded",
    "refunded_cents": 1700,
    "total_cents": 7590
  }
}

curl -X POST https://api.gocushy.com/api/v1/orders/01J2QP8XN4V6T9R3E7M1B0CDEE/cancel-subscription \
  -H "Authorization: Bearer gc_your_key" \
  -H "Content-Type: application/json" \
  -d '{}'

# → { "canceled": true, "when": "at period end" }
# Pass { "immediately": true } to cut access now.

{
  "window_days": 30,
  "revenue_cents": 412300,
  "orders_paid": 61,
  "orders_failed": 4,
  "orders_refunded": 2,
  "bump_take_rate": 0.377,
  "upsell_take_rate": 0.213,
  "by_offer": [
    { "name": "Launch Course", "orders": 48, "revenue_cents": 322000 },
    { "name": "Workbook Solo", "orders": 13, "revenue_cents": 90300 }
  ]
}

curl -X POST https://api.gocushy.com/api/v1/affiliates \
  -H "Authorization: Bearer gc_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Jess Parker",
    "email": "jess@example.com",
    "code": "jess",
    "default_commission_bps": 3000,
    "payout_note": "PayPal: jess@example.com"
  }'

{
  "affiliate": {
    "id": "01J2QR9C4XN4V6T9R3E7M1B0FF",
    "name": "Jess Parker",
    "email": "jess@example.com",
    "code": "jess",
    "default_commission_bps": 3000,
    "payout_note": "PayPal: jess@example.com"
  }
}

curl -X POST https://api.gocushy.com/api/v1/affiliates/01J2QR9C4XN4V6T9R3E7M1B0FF/mark-paid \
  -H "Authorization: Bearer gc_your_key"

{
  "marked_paid_cents": 14700,
  "marked_paid_by_currency": { "usd": 14700 },
  "affiliate": { "id": "01J2QR9C4XN4V6T9R3E7M1B0FF", "name": "Jess Parker", "code": "jess", "payout_note": "PayPal: jess@example.com" },
  "note": "Record the actual transfer with your payout provider — gocushy tracks the ledger, your money does the paying."
}

curl -X POST https://api.gocushy.com/api/v1/webhooks \
  -H "Authorization: Bearer gc_your_key" \
  -H "Content-Type: application/json" \
  -d '{ "url": "https://example.com/webhooks/gocushy", "events": ["order.paid", "order.refunded"] }'

{
  "webhook": {
    "id": "01J2QS0D5XN4V6T9R3E7M1B0GG",
    "url": "https://example.com/webhooks/gocushy",
    "events": ["order.paid", "order.refunded"],
    "active": true
  },
  "signing_secret": "cwh_kJ8mN2pQ4rS6tU8vW0xY2zA4bC6dE8fG1hJ3kL5m",
  "note": "Store this secret now — it is not shown again. Verify: hex HMAC-SHA256 of the raw request body, header X-Cushy-Signature."
}

{
  "event": "order.paid",
  "sent_at": "2026-08-01T10:14:07+00:00",
  "order": {
    "id": "01J2QP8XN4V6T9R3E7M1B0CDEE",
    "status": "paid",
    "buyer_email": "buyer@example.com",
    "buyer_name": "Alex Buyer",
    "total_cents": 7590,
    "tax_cents": 990,
    "currency": "usd",
    "bump_taken": true,
    "upsell_taken": false,
    "offer": { "id": "01J2QN7B2XN4V6T9R3E7M1B0DD", "name": "Launch Course", "slug": "launch-course" },
    "items": [
      { "kind": "main", "product_id": "01J2QK5W8XN4V6T9R3E7M1B0AA", "product_name": "Launch Course", "amount_cents": 4900 },
      { "kind": "bump", "product_id": "01J2QK5W8XN4V6T9R3E7M1B0BB", "product_name": "Launch Workbook", "amount_cents": 1700 }
    ],
    "created_at": "2026-08-01T10:13:58+00:00"
  }
}

const crypto = require("crypto");
const express = require("express");
const app = express();

app.post(
  "/webhooks/gocushy",
  express.raw({ type: "application/json" }), // raw body — do not use express.json() here
  (req, res) => {
    const signature = req.get("X-Cushy-Signature") || "";
    const expected = crypto
      .createHmac("sha256", process.env.CUSHY_WEBHOOK_SECRET)
      .update(req.body) // Buffer of the raw bytes
      .digest("hex");

    const valid =
      signature.length === expected.length &&
      crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));

    if (!valid) return res.status(401).send("bad signature");

    const { event, order } = JSON.parse(req.body);
    if (event === "order.paid") {
      // grant access for order.buyer_email
    }
    res.sendStatus(200);
  }
);

<?php

$secret    = getenv('CUSHY_WEBHOOK_SECRET');
$raw       = file_get_contents('php://input');
$signature = $_SERVER['HTTP_X_CUSHY_SIGNATURE'] ?? '';

if (!hash_equals(hash_hmac('sha256', $raw, $secret), $signature)) {
    http_response_code(401);
    exit('bad signature');
}

$payload = json_decode($raw, true);

if ($payload['event'] === 'order.paid') {
    // grant access for $payload['order']['buyer_email']
}

http_response_code(200);

curl "https://api.gocushy.com/api/v1/verify-purchase?email=buyer%40example.com&product_id=01J2QK5W8XN4V6T9R3E7M1B0AA" \
  -H "Authorization: Bearer gc_your_key"

{
  "purchased": true,
  "orders": [
    {
      "id": "01J2QP8XN4V6T9R3E7M1B0CDEE",
      "offer_id": "01J2QN7B2XN4V6T9R3E7M1B0DD",
      "status": "paid",
      "total_cents": 7590,
      "currency": "usd",
      "created_at": "2026-08-01T10:13:58.000000Z"
    }
  ]
}

async function requirePurchase(req, res, next) {
  const email = req.user.email; // however you identify the visitor
  const params = new URLSearchParams({
    email,
    product_id: process.env.COURSE_PRODUCT_ID,
  });

  const r = await fetch(
    `https://api.gocushy.com/api/v1/verify-purchase?${params}`,
    { headers: { Authorization: `Bearer ${process.env.GOCUSHY_API_KEY}` } }
  );
  const { purchased } = await r.json();

  if (!purchased) return res.status(403).send("No purchase found for this email.");
  next();
}

app.get("/course", requirePurchase, (req, res) => res.render("course"));

<a href="https://gocushy.com/c/YOUR_ACCOUNT_ID/your-offer-slug" data-cushy>Buy now</a>
<script src="https://api.gocushy.com/embed.js" defer></script>