Ultimate IAP & Microtransaction Suite v2.0

:rocket: ULTIMATE IAP & MICROTRANSACTION SUITE v2.0

Server-Authoritative Monetization & Anti-Cheat for RPG Maker MZ

g1

Let’s face the cold, hard reality of RPG Maker MZ: if your microtransactions, premium currencies, or DLC unlocks rely on client-side switches or $gameSystem variables, your players aren’t buying your items.

They are editing their save files in Notepad, altering variables with DevTools, or pressing F12 to give themselves 999,999 gems. :money_with_wings:

Trusting the client with monetization is not a security strategy; it is an honor system. :stop_sign:

The Ultimate IAP & Microtransaction Suite v2.0 stops pretending that JavaScript running in an open NW.js container or browser iframe can protect your revenue.

It bridges RPG Maker MZ directly with an edge-computed Cloudflare Worker backend locked behind HMAC-SHA256 cryptographic signatures.:locked_with_key:

Whether you are selling extra potions, cosmetic outfits, stat boosts, or full story expansions, this suite gives you commercial-grade infrastructure without forcing you to write server code or manage database clusters. :sparkles:

:credit_card: MULTI-PLATFORM PAYMENT ENGINE


__

Define your product catalog once in data/IAP_Catalog.json.

The engine auto-syncs with your edge server on boot and routes transactions cleanly regardless of where your game is running:

Stripe Checkout (Web / HTML5 / Itch.io): Native popups via sync-safe windows, session auto-recovery, and global currency handling (USD, EUR, GBP, JPY, CAD, AUD, BRL).

PRODUCTION READY - Steamworks API (PC Desktop): Direct integration via steamworks.js for native Steam Overlay checkout, microtransaction receipt validation, and Steam Wallet processing.

IMPLEMENTED & EXPANDABLE

Mock Mode (Development Sandbox): Zero-friction local testing. Simulate instant approvals, network timeouts, or payment rejections without spending a single cent during development. PRODUCTION READY

:gear: TECHNICAL SPECIFICATIONS & ARCHITECTURE

  • :shield: HMAC-SHA256 Anti-Cheat: Zero external JS dependencies. Every single payload is signed client-side and verified server-side using cryptographic nonces and timestamps to make replay attacks impossible.

  • :high_voltage: Cloudflare Worker Edge Infrastructure: Global low-latency execution, KV storage for permanent inventory tracking, IP rate-limiting, and receipt verification.

  • :wrapped_gift: 6 Reward Types: Native handling for In-Game Currencies (“Gems”), Consumable Items, Permanent Equipment/Unlocks, Actor Skills, Game Variables, and Game Switches.

  • :package: 7 Product Classes: Currency Bundles, Consumables, Weapons, Armor, Costumes, DLC Expansions, and Multi-Item Bundles.

  • :cloud: Server-Side Ownership Tracking: Permanent unlocks are stored in Cloudflare KV — modifying local save files will not unlock server-validated items.

  • :counterclockwise_arrows_button: Offline Retry Queue: If a player loses internet mid-transaction, pending receipts are encrypted and queued locally in font=courier $gameSystem with exponential backoff retries on boot.

  • :shopping_cart: Built-in Shop UI: Includes Grid and List viewports, category filtering, item detail modals, payment confirmation dialogs, and slide-in notifications.

  • :video_game: Main Menu Integration: Optional auto-injection directly into the RPG Maker MZ title screen and main menu command window.


:laptop: DEVELOPER TOOLKIT & API

Full control over your game’s economy via 11 native Plugin Commands and 22 Script API methods.

:electric_plug: Plugin Commands (11)

  • OpenShop
  • RefreshCatalog
  • GetBalance
  • SetBalance
  • AddCurrency
  • SubtractCurrency
  • CheckBalance
  • IsOwned
  • Consume
  • GetOwnedCount
  • OpenCheckout

:scroll: Script API (22 Methods — window.UltimateIAP)

courier openShop(), refreshCatalog(), getBalance(), setBalance(), addCurrency(), subtractCurrency(), checkBalance(), purchase(), consume(), getProduct(), getProductsByCategory(), isOwned(), getOwnedNonConsumables(), getOwnedCount(), setPlayerUUID(), setSteamId64(), getPlayerUUID(), onPurchaseSuccess(), onPurchaseFailed(), onPurchaseError(), retryQueue.process(), retryQueue.getLength()

:label: EDITIONS & PRICING

:pushpin: SYSTEM REQUIREMENTS

  • RPG Maker MZ (v1.7.0 or higher)
  • Cloudflare Account (Free Tier easily handles thousands of daily transactions)
  • Stripe Account (Web builds) and/or Steamworks Partner Access (Steam builds)
  • Node.js 18+ (Only used once to deploy the Worker via terminal)

:high_voltage: 5-MINUTE QUICK START SETUP

  1. Copy UltimateIAP.js to js/plugins/ and enable it in the Plugin Manager.

2- Place IAP_Catalog.json into your project’s data/ folder.

  1. Deploy the edge server: npx wrangler deploy

  2. Paste your Worker Endpoint and HMAC Secret key into the plugin parameters.

  3. Test a sandbox purchase via script call:

UltimateIAP.purchase("test_5gems").then(res => console.log(res));

:link: GET STARTED

Try on browser for free

Try THIS PLUGIN on browser

For more Plugins (Like AI Dialogue, FOG Minimap and more)
visit my site HERE

Full configuration/tutorial guide in GitHub

Engineered with :heart: by Rpx Games & Just Dev