Lemon Squeezy

Warnings

• breaking Lemon Squeezy was acquired by Stripe in October 2024. As of May 2025, Stripe announced 'Stripe Managed Payments' as the successor merchant of record product. Lemon Squeezy's API may be deprecated or migrated to Stripe infrastructure in the future. New integrations should evaluate Stripe Managed Payments (waitlist) instead.
  Fix: For new projects, join the Stripe Managed Payments waitlist. For existing Lemon Squeezy integrations, no immediate action needed — Lemon Squeezy API continues operating.
• breaking No official Python SDK exists. All PyPI packages named 'lemonsqueezy*' are unofficial, may be abandoned, and have no support from Lemon Squeezy / Stripe.
  Fix: Use requests or httpx against the REST API directly. The API is stable and documented at docs.lemonsqueezy.com/api.
• gotcha The Lemon Squeezy API follows JSON:API spec. Response payload is wrapped: response['data'] contains the resource(s), not the top-level response. Code accessing response['products'] or response['id'] directly fails.
  Fix: Access data at response.json()['data'] for single resources or list responses. Meta and links are at the top level.
• gotcha Both Accept and Content-Type headers must be 'application/vnd.api+json', not 'application/json'. Sending standard JSON headers returns 406 Not Acceptable.
  Fix: Set headers: {'Accept': 'application/vnd.api+json', 'Content-Type': 'application/vnd.api+json'}
• gotcha Lemon Squeezy has Test mode (separate from live). Test mode API keys start with a different prefix. Using a live key in Test mode or vice versa will access production data unexpectedly.
  Fix: Create separate API keys for test and live modes from Settings > API.

Install

• pip install requests Python (use direct REST calls — no official SDK)

Imports

• API client

  import requests
  
  headers = {
      'Authorization': 'Bearer YOUR_API_KEY',
      'Accept': 'application/vnd.api+json',
      'Content-Type': 'application/vnd.api+json'
  }
  response = requests.get('https://api.lemonsqueezy.com/v1/products', headers=headers)
  

  No official Python SDK. Any 'lemonsqueezy' PyPI package is unofficial/community-maintained. Use requests or httpx against the REST API directly.

Quickstart

Direct REST API usage. Response follows JSON:API spec — data is in response['data'], not response directly.

import requests
import os

API_KEY = os.getenv('LEMON_SQUEEZY_API_KEY')
BASE_URL = 'https://api.lemonsqueezy.com/v1'

headers = {
    'Authorization': f'Bearer {API_KEY}',
    'Accept': 'application/vnd.api+json',
    'Content-Type': 'application/vnd.api+json'
}

# List products
resp = requests.get(f'{BASE_URL}/products', headers=headers)
products = resp.json()['data']
for product in products:
    print(product['id'], product['attributes']['name'])

# Verify webhook signature (HMAC-SHA256)
import hmac
import hashlib

def verify_webhook(payload: bytes, signature: str, secret: str) -> bool:
    expected = hmac.new(
        secret.encode(),
        payload,
        hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, signature)