How to get a Gumroad access token

Updated 2026-08-04

Creating one

Open Gumroad → Settings → Advanced.
Find the Applications section.
Create an application — name it after where it'll be used.
Generate an access token from that application.
Copy it somewhere safe.

Scope

Gumroad access tokens are account-scoped. Like Lemon Squeezy, and unlike Stripe, there is no read-only mode.

Handle it as you would account access: give it only to tools you trust, prefer ones that keep it on your device, and revoke it the moment you stop using them.

What FRGMNT reads with it

Today's sales, feeding today's cash and the ledger
A validation call to confirm the token works

Note that Gumroad deliberately does not contribute to True MRR. Most Gumroad revenue is one-off product sales, and folding one-off revenue into a recurring metric makes the metric useless. See does one-off revenue count towards MRR? and the Gumroad integration.

Revoking

Delete the application from Settings → Advanced → Applications. The token stops working immediately.

Frequently asked

Where do I get a Gumroad API token?

Settings then Advanced then Applications in your Gumroad dashboard. Create an application, then generate an access token from it.

Can a Gumroad token be made read-only?

No. Gumroad access tokens are account-scoped without granular permissions. Treat them with the same care as account access.