Skip to content
HoorayPass

API, webhooks, Zapier and AI assistant

For businesses that have a developer or an AI assistant. None of this is needed to use the card.

Available
Book a demoAll integrations
A hand holds a black phone in a living room.

An API to connect your members, stamps and rewards to your software

Your website or software can read and update your members. The same rules as at the counter apply: stamp limits and customer consent.

  • Versioned and documented

    JSON, version in the path (/v1), OpenAPI specification, error messages in French or English.

  • One key per use

    The owner creates each key and chooses what it can do. The secret key shows only once; we keep only its fingerprint.

  • Contact details protected

    Without the members.contact:read scope, a key sees no phone or email: only the ID, first name and balances.

  • A separate test set

    A key starting with test_ writes to test data, without touching a real card.

  • No duplicate writes

    The Idempotency-Key header is required to add a stamp: the same request replayed credits only once.

  • No promotions through the API

    Sending messages stays in your merchant space, with its consent check.

Automatic notices sent to your software (webhooks)

Your software is told when something happens, for example a stamp added. Each delivery is signed (HMAC-SHA256 of the body and timestamp) in the X-Signature header; reject any timestamp older than 5 minutes. Failed deliveries are retried, then kept with a “Replay” button.

Events

  • member.created
  • member.deleted
  • member.merged
  • stamp.added
  • stamp.voided
  • reward.earned
  • reward.redeemed
  • consent.changed
  • card.added
  • card.removed

By default, deliveries contain no personal information: no phone number, no email.

Your endpoint must use HTTPS. A private or internal address is refused.

ExampleExample stamp.added payload
{
  "id": "evt_exemple_01",
  "type": "stamp.added",
  "created": "2026-09-30T14:05:00Z",
  "data": {
    "member_id": "mbr_exemple_42",
    "location_id": "loc_exemple_1",
    "stamps": 8,
    "stamps_required": 10
  }
}

Zapier, without a developer

By invitationAvailable once Zapier approves

If you already use Zapier, connect your members, stamps and rewards to a spreadsheet, your email or your accounting.

Triggers: new member, stamp added, reward earned, reward redeemed, consent changed.

Actions: create or update a member, add a stamp, find a member. No action sends a promotion.

At launch, the integration is private: we send you the invitation link on request. It becomes public in Zapier once approved.

You need your own Zapier account. Zapier bills you directly for its use.

Your program in your AI assistant

Connect Claude, ChatGPT or Cursor to your program, through our MCP server. Then ask in your own words: “How many members came back this month?”, “Draft a promo for Tuesday”.

What it can do

  • Read your numbers: members, visits, customers back after 30, 60 and 90 days, by location.
  • Draft promotions and review replies, which you check before sending.
  • Add a stamp, only if you tick that permission.

What it can’t do

  • Send a message to your members.
  • Delete data or export personal information.
  • Change your program’s rules.

The owner authorizes the connection and can cut it off at any time. What the assistant reads is processed by its provider, outside our servers.

Developer questions

Who can create a key?
Only the business owner, never a manager. A key never has more rights than the owner.
Where is the documentation?
The OpenAPI specification and its documentation, in French and English, come with access, in the Integrations section of your merchant space.
Does the API cost extra?
No. API calls, webhooks and the MCP server are included in the $89 monthly subscription.

Sources

Talk to someone who knows the API.

A 15-minute demo by video call, with your technical questions.