ULTIMATE IAP & MICROTRANSACTION SUITE v2.0
Server-Authoritative Monetization & Anti-Cheat for RPG Maker MZ

Let’s face the cold, hard reality of RPG Maker MZ: if your microtransactions, premium currencies, or DLC unlocks rely on client-side switches or $gameSystem variables, your players aren’t buying your items.
They are editing their save files in Notepad, altering variables with DevTools, or pressing F12 to give themselves 999,999 gems. ![]()
Trusting the client with monetization is not a security strategy; it is an honor system. ![]()
The Ultimate IAP & Microtransaction Suite v2.0 stops pretending that JavaScript running in an open NW.js container or browser iframe can protect your revenue.
It bridges RPG Maker MZ directly with an edge-computed Cloudflare Worker backend locked behind HMAC-SHA256 cryptographic signatures.![]()
Whether you are selling extra potions, cosmetic outfits, stat boosts, or full story expansions, this suite gives you commercial-grade infrastructure without forcing you to write server code or manage database clusters. ![]()
MULTI-PLATFORM PAYMENT ENGINE
__
Define your product catalog once in data/IAP_Catalog.json.
The engine auto-syncs with your edge server on boot and routes transactions cleanly regardless of where your game is running:
Stripe Checkout (Web / HTML5 / Itch.io): Native popups via sync-safe windows, session auto-recovery, and global currency handling (USD, EUR, GBP, JPY, CAD, AUD, BRL).
PRODUCTION READY - Steamworks API (PC Desktop): Direct integration via steamworks.js for native Steam Overlay checkout, microtransaction receipt validation, and Steam Wallet processing.
IMPLEMENTED & EXPANDABLE
Mock Mode (Development Sandbox): Zero-friction local testing. Simulate instant approvals, network timeouts, or payment rejections without spending a single cent during development. PRODUCTION READY
TECHNICAL SPECIFICATIONS & ARCHITECTURE
-
HMAC-SHA256 Anti-Cheat: Zero external JS dependencies. Every single payload is signed client-side and verified server-side using cryptographic nonces and timestamps to make replay attacks impossible. -
Cloudflare Worker Edge Infrastructure: Global low-latency execution, KV storage for permanent inventory tracking, IP rate-limiting, and receipt verification. -
6 Reward Types: Native handling for In-Game Currencies (“Gems”), Consumable Items, Permanent Equipment/Unlocks, Actor Skills, Game Variables, and Game Switches. -
7 Product Classes: Currency Bundles, Consumables, Weapons, Armor, Costumes, DLC Expansions, and Multi-Item Bundles. -
Server-Side Ownership Tracking: Permanent unlocks are stored in Cloudflare KV — modifying local save files will not unlock server-validated items. -
Offline Retry Queue: If a player loses internet mid-transaction, pending receipts are encrypted and queued locally in font=courier $gameSystem with exponential backoff retries on boot. -
Built-in Shop UI: Includes Grid and List viewports, category filtering, item detail modals, payment confirmation dialogs, and slide-in notifications. -
Main Menu Integration: Optional auto-injection directly into the RPG Maker MZ title screen and main menu command window.
DEVELOPER TOOLKIT & API
Full control over your game’s economy via 11 native Plugin Commands and 22 Script API methods.
Plugin Commands (11)
OpenShopRefreshCatalogGetBalanceSetBalanceAddCurrencySubtractCurrencyCheckBalanceIsOwnedConsumeGetOwnedCountOpenCheckout
Script API (22 Methods — window.UltimateIAP)
courier openShop(), refreshCatalog(), getBalance(), setBalance(), addCurrency(), subtractCurrency(), checkBalance(), purchase(), consume(), getProduct(), getProductsByCategory(), isOwned(), getOwnedNonConsumables(), getOwnedCount(), setPlayerUUID(), setSteamId64(), getPlayerUUID(), onPurchaseSuccess(), onPurchaseFailed(), onPurchaseError(), retryQueue.process(), retryQueue.getLength()
EDITIONS & PRICING
SYSTEM REQUIREMENTS
- RPG Maker MZ (v1.7.0 or higher)
- Cloudflare Account (Free Tier easily handles thousands of daily transactions)
- Stripe Account (Web builds) and/or Steamworks Partner Access (Steam builds)
- Node.js 18+ (Only used once to deploy the Worker via terminal)
5-MINUTE QUICK START SETUP
- Copy
UltimateIAP.jstojs/plugins/and enable it in the Plugin Manager.
2- Place IAP_Catalog.json into your project’s data/ folder.
-
Deploy the edge server:
npx wrangler deploy -
Paste your Worker Endpoint and HMAC Secret key into the plugin parameters.
-
Test a sandbox purchase via script call:
UltimateIAP.purchase("test_5gems").then(res => console.log(res));
GET STARTED
Try on browser for free
Try THIS PLUGIN on browser
For more Plugins (Like AI Dialogue, FOG Minimap and more)
visit my site HERE
Full configuration/tutorial guide in GitHub
Engineered with
by Rpx Games & Just Dev


