Richer API Data, U.S. Self-Cancellation Rights & Webhook Security

Screenshot of the ThriveCart settings dashboard below the blog's title 'Richer API Data, U.S. Self-Cancellation Rights & Webhook Security'

The mid-April feature release delivers meaningful improvements across three areas that matter most to power users and developers building on ThriveCart.

For merchants and developers leveraging ThriveCart’s API, two key data points have been added to the Transactions endpoint, giving you richer, more actionable data when querying your business. While many competing platforms lock away or limit API access entirely, ThriveCart continues to invest in giving you full, open access to your data – on your terms.

For subscription merchants with U.S.-based customers, self-cancellation rights have been extended to mirror existing EU protections, ensuring compliance and a consistent customer experience across regions.

And for developers using webhooks, the customer_updated event now ships with the verification fields needed to confirm the legitimacy of incoming requests, closing a key security gap.

As always, these updates are designed to give you more control, more transparency, and more confidence in how ThriveCart helps you run your business.

Summary

Enhanced Transactions API: Customer ID & Subscription Status
Two new fields have been added to the GET Search Transactions API endpoint: the internal ThriveCart Customer ID and the live Subscription Current Status, giving developers and integrators richer, real-time data on every transaction query.

U.S. Customers Added to Self-Cancellation Rules
U.S.-based subscription customers can now always self-cancel, regardless of vendor settings, bringing them in line with the existing EU self-cancellation protections already in place.

Customer Email Updated Webhook Now Includes Verification Fields
The customer_updated webhook event now includes thrivecart_account and thrivecart_secret fields, enabling developers to verify the authenticity of incoming webhook requests.

Enhanced transactions API: customer ID & subscription status

ThriveCart’s API is one of the most powerful in the industry, and this update makes it even more so.

Screenshot showing API & webhooks settings in ThriveCart

Unlike many competing checkout and cart platforms that offer little to no API access, or limit what data you can retrieve, ThriveCart gives you full, open access to your business data. This week, two critical fields have been added to the GET Search Transactions API endpoint, making every query more informative and more useful for automation, reporting, and third-party integrations.

What’s new

The GET Search Transactions endpoint now returns two additional fields:

  • ThriveCart Customer ID (customer.id) – the internal unique identifier for each customer record, enabling precise cross-referencing between API data and other systems
  • Subscription Current Status (subscription_current_status)– a live reflection of the subscription state at the time of the API request, returning one of four values: active, paused, cancelled, or completed


Screenshot showing where to create an API key in ThriveCart
Screenshot showing how to name the new API key within ThriveCart


Why it matters

  • Developers can now accurately identify individual customers in API responses without relying solely on email addresses
  • Real-time subscription status means your integrations always reflect the current state of a subscription, not a historical snapshot
  • Combining both fields enables powerful automation, such as triggering workflows based on live subscription states tied to specific customer records
  • ThriveCart’s open, developer-friendly API continues to outpace competitors who restrict or withhold this level of data access entirely


Available now for all API users. No configuration required. Simply query the GET Search Transactions endpoint to see the new fields in your response data.

👉 Click here to explore API docs

U.S. customers added to self-cancellation rules

Giving customers control over their subscriptions isn’t just good practice; in many cases, it’s the law.

ThriveCart already enforces self-cancellation rights for EU-based customers, ensuring they can always cancel an ongoing subscription regardless of what a vendor has configured. This update extends that same protection to U.S.-based customers, reflecting evolving consumer protection standards and reducing the risk for merchants operating in the United States.

Screenshot showing customer self-cancellation options within ThriveCart

What’s new

  • U.S.-based customers on ongoing subscription products can now always self-cancel, regardless of vendor-level or product-level cancellation settings
  • Checkbox copy in both account-wide and product-level settings has been updated to clearly reflect this change, so vendors always know exactly what their customers can do
  • EU protections remain fully intact and unchanged


Why it matters

  • U.S. merchants are protected from potential compliance issues related to subscription cancellation restrictions
  • Customers get a consistent, transparent cancellation experience across all regions
  • Clearer settings copy removes ambiguity for vendors managing subscription products at scale


Available now for all merchants with U.S.-based subscription customers.

👉 Click here for the Customer Support article

Customer email updated webhook: verification fields added

Webhooks are only as useful as they are trustworthy.

When ThriveCart fires a customer_updated event, your systems need to know with certainty that the request is genuine and hasn’t been spoofed or tampered with. Previously, the customer_updated webhook lacked the verification fields that other ThriveCart webhook events already include. That gap has now been closed.

What’s new

The customer_updated webhook payload now includes:

  • thrivecart_account – your ThriveCart account identifier
  • thrivecart_secret – your unique secret key for verifying request authenticity


These fields align customer_updated with the verification approach used across other ThriveCart webhook events.

Why it matters

  • Developers can now validate incoming customer_updated requests with confidence, using the same verification pattern they already apply elsewhere.
  • Reduces the risk of acting on spoofed or malformed webhook data.
  • Brings consistency across all ThriveCart webhook events, making integrations more secure and predictable.


Available now for all webhook users. No changes to your endpoint configuration required. Simply update your verification logic to use the new fields from incoming customer_updated payloads.

👉 Click here for the Customer Support article

That’s What’s New… What’s Next?

ThriveCart is home to more than 75K+ creators, whilst our unique product offering, Pro+, now supports over 44,000 merchants. Pro+ gives you and your business the greatest functionalities and capabilities in the industry. ThriveCart regularly adds new features and updates, so make sure you sign up to our mailing list and to our Facebook Community for the latest developments.

Not yet a Pro+ customer?
Click here to upgrade.

Already a Pro+ customer?
Please note that as a Pro+ user, you will not be able to take full advantage of the sales revenue-generating and advanced reporting features if you have not configured your existing products with Stripe Connect+ and enabled it on your products. Click here to learn how to configure Stripe Connect+ in less than five minutes.

Other articles you might find interesting

10 Tips to Increase Conversion Rate With ThriveCart

Your conversion rate is one of the most important sales metrics in your business. It tells you how many site visitors are becoming paying customers.  ...
Read Article

The Power of Integrations: How to Supercharge Your Business with ThriveCart

ThriveCart’s over 100 integrations let you connect your checkout and funnel workflows with the tools to help you run your online business, including email marketing, customer ...
Read Article

From Simple Setup to Driving Sales: How Smart Creators Use Coupon Codes in ThriveCart

Mo had a problem. As a Notion template creator, he’d built a successful business selling productivity systems to remote workers and entrepreneurs. But managing his ...
Read Article

How Affiliate Tracking Cookies Work in ThriveCart (And Why They Matter for Your Sales)

Meet Alex. She’s built a thriving business selling the latest email and social media marketing strategies. When she launched her affiliate program last year, she was excited ...
Read Article

Ready to grow your business with ThriveCart?

Whether you’re launching your first offer or optimizing your 10th funnel, ThriveCart gives you the tools, control, and leverage to grow a business that’s built to last.