API infrastructure for platforms

Ship wallet passes without building pass infrastructure.

walletKit issues, updates, and verifies Apple Wallet and Google Wallet passes from one API. Built for platforms that already own the member relationship.

Get API keys Read the developer guide

Your platform remains the system of record for members, billing, subscriptions, and events.

issue-pass.ts

const res = await fetch(API_URL + "/passes/upsert", {
  method: "POST",
  headers: {
    "X-API-KEY": process.env.WALLETKIT_API_KEY,
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    externalUserId: "sub_2481",
    templateId: process.env.WALLETKIT_TEMPLATE_ID,
    wallets: ["apple", "google"]
  })
});

const { data: pass } = await res.json();
return pass.links;

201 created

https://passes.yourplatform.com/p/ps_92kq

One integration

Apple Wallet + Google Wallet

Why embed

Issuing one pass is the easy part.

Operating passes across two wallet platforms is an ongoing infrastructure job. It is rarely the product your customers pay you to build.

Apple signing

Pass Type IDs, signing certificates, provisioning, and renewal all need an owner.

Device updates

Apple device registration, update tags, APNs, and delivery failures form a second system.

Google Wallet

Classes, objects, service accounts, JWT claims, and callbacks use a different model.

Credential lifecycle

Expired, paused, revoked, and reinstated passes must stay in step with your records.

One pass lifecycle

Three operations cover the lifecycle.

Your records remain the source of truth. walletKit handles the credential that mirrors them.

Node.js and Python quickstart

POST /passes/upsert

Issue

Create a pass from a template, keyed to your own member ID. Hand back install links for Apple Wallet and Google Wallet.

links.apple · links.google

PATCH /passes/{id}

Update

Change tier, dates, balance, or status when the source record changes. The credential stays current without a new download.

{ "status": "paused" }

GET /passes/{id}

Verify

Every pass QR resolves to its live record, so a scan always shows current status. Signed webhooks report installs, expiries, and points back to your platform.

webhook · pass.installed

Your product

Map passes onto the model you already have.

You do not adopt another CRM or billing model. A pass is a projection of the records and states your platform already stores.

MembershipsMember pass

Every tier becomes one pass. Change status on your side and the lock screen updates within seconds — no reinstall, no new download link.

activepausedexpiredarchived

Group bookingOne pass per ticket

A single booking with five tickets issues five separate passes — one per attendee, each independently scannable at the door.

ticket 1ticket 2ticket 3ticket 4

Door scanAttendance record

Verify from a phone browser and post the result back to the event record you already own.

checked ininvalidarchived

Agentic Pass through MCP

Let an agent act. Keep the member in control.

Agentic Pass is walletKit's delegated-authority layer. Your assistant connects through MCP, but every pass or reward action remains bound to a signed mandate from the human member.

Explore Agentic Pass View MCP server on GitHub

Fixed scope

Cap spend, quantity, purpose, pass type, and lifetime when the mandate is issued.

Human threshold

Allow small actions automatically and route larger ones back to the member for approval.

Immediate revocation

Remove the agent’s authority without changing the member account or pass.

Audit trail

Record every allow, escalate, deny, and error decision for later review.

White label

Your name on it. Not ours.

walletKit is infrastructure. Your customers stay inside your product, under your brand, with your team as their point of contact.

passes.yourplatform.com

scan.yourplatform.com

Your domain

Serve install and scan flows from a subdomain your customers recognise.

Your branding

Use your product and customer identity without a walletKit watermark.

Your pricing

Package pass access inside the plans and commercial model you already sell.

Your support

Keep the customer relationship while walletKit supplies the credential audit trail.

Customer zero

Built around a real platform model.

The first integration maps member records, subscriptions, group bookings, guest passes, and event attendance onto the walletKit pass lifecycle.

The platform keeps its members, billing, campaigns, and leads. walletKit handles the phone credential and returns verification events.

Request API access

Put a pass in your product.

Tell us what your platform already manages and where a wallet credential should fit. We will map the integration with you.

hello@walletkit.app

security@walletkit.app