Verify Site Password

Updated 10 September 2026

POST `?action=verify_site_password`

Check the store password a visitor typed at a private store's door — for a storefront that mirrors Panelr's own gate. Read get_store_settings first: when gate.mode is "password", ask the visitor for it and send it here. A members-only door (gate.mode "member") is opened with verify_customer_login or validate_referral_code instead. Answers 200 either way so the storefront can show the result; whether a password is set at all is never revealed.

Request Parameters

Field	Type	Required	Description
`password`	string	Required	What the visitor typed
`customer_ip`	string	Optional	The visitor's own address. Wrong answers are throttled per visitor; too many in a row answer 429 "Too many attempts"

Response Fields

Field	Type	Description
`applies`	boolean	false when the store is public or its door is members-only — nothing to check
`valid`	boolean	Whether the password opens the door

Example request

$ch = curl_init('PANELR_API_URL?action=verify_site_password');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => '{"password":"letmein"}',
    CURLOPT_HTTPHEADER => [
        'X-Panelr-API-Key: YOUR_API_KEY',
        'Content-Type: application/json',
    ],
]);
$data = json_decode(curl_exec($ch), true);
curl_close($ch);

curl -X POST "PANELR_API_URL?action=verify_site_password" \
  -H "X-Panelr-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"password":"letmein"}'

const res = await fetch('PANELR_API_URL?action=verify_site_password', {
  method: 'POST',
  headers: {
    'X-Panelr-API-Key': 'YOUR_API_KEY',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({"password":"letmein"}),
});
const { data } = await res.json();

import requests
r = requests.post('PANELR_API_URL',
    params={'action': 'verify_site_password'},
    headers={'X-Panelr-API-Key': 'YOUR_API_KEY'},
    json={"password":"letmein"})
data = r.json()['data']

POST ?action=verify_site_password

Request Parameters

Response Fields

POST `?action=verify_site_password`