RESTful API for real-time NIL deal reporting to university compliance offices. OAuth 2.0 authentication, JSON payloads, webhook support.
The GamePlan NIL Compliance API enables universities to receive real-time notifications when their athletes enter into NIL deals. This ensures compliance with NCAA rules, state laws, and institutional policies.
Webhooks deliver instant notifications when athletes sign new deals
OAuth 2.0, AES-256 encryption, SOC 2 Type II certified
Standard HTTP methods, JSON payloads, predictable resource URLs
| Specification | Details |
|---|---|
| Base URL | https://api.gameplan-nil.com/v1 |
| Protocol | HTTPS only (TLS 1.2+) |
| Authentication | OAuth 2.0 with JWT tokens |
| Data Format | JSON (application/json) |
| Rate Limiting | 1000 requests/hour per institution |
| Webhooks | Supported (recommended for real-time updates) |
| API Version | v1 (current), backward compatible |
GamePlan NIL uses OAuth 2.0 Client Credentials flow for server-to-server authentication.
POST https://api.gameplan-nil.com/v1/oauth/token
Content-Type: application/x-www-form-urlencoded
grant_type=client_credentials
&client_id=YOUR_CLIENT_ID
&client_secret=YOUR_CLIENT_SECRET
&scope=compliance:read compliance:write{
"access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
"token_type": "Bearer",
"expires_in": 3600,
"scope": "compliance:read compliance:write"
}Retrieve all NIL deals for athletes at your institution. Supports filtering by date, athlete, status, and sport.
GET /v1/compliance/deals?start_date=2025-01-01&status=active
Authorization: Bearer YOUR_ACCESS_TOKEN{
"data": [
{
"deal_id": "deal_abc123",
"athlete_id": "ath_456",
"athlete_name": "John Smith",
"sport": "Football",
"brand_name": "Local Pizza Co",
"deal_value": 2500.00,
"deal_date": "2025-01-15",
"status": "active",
"deliverables": ["2 Instagram posts", "1 appearance"],
"compliance_status": "approved"
}
],
"pagination": {
"total": 45,
"page": 1,
"per_page": 50
}
}Retrieve profile information and NIL activity summary for a specific athlete.
Register a webhook endpoint to receive real-time notifications when athletes at your institution sign new NIL deals.
Fired when athlete signs new deal
Fired when deal terms change
Fired when deal is fulfilled
Fired for potential rule violations
All webhook payloads include an HMAC-SHA256 signature header for verification. Webhook endpoints must return a 200 OK within 5 seconds.
{
"deal_id": "string", // Unique deal identifier
"athlete_id": "string", // Athlete unique identifier
"athlete_name": "string", // Full name
"sport": "string", // Sport (Football, Basketball, etc.)
"year": "string", // Freshman, Sophomore, Junior, Senior
"brand_name": "string", // Brand/company name
"brand_category": "string", // Apparel, Restaurant, Local Business, etc.
"deal_type": "string", // Social Media, Appearance, Endorsement, etc.
"deal_value": number, // USD amount (decimal)
"deal_date": "YYYY-MM-DD", // Date deal was signed
"start_date": "YYYY-MM-DD", // When deliverables begin
"end_date": "YYYY-MM-DD", // When deliverables end
"status": "string", // pending | active | completed | cancelled
"deliverables": ["string"], // Array of deliverable descriptions
"compliance_status": "string", // approved | under_review | flagged
"state_compliant": boolean, // Meets state NIL laws
"ncaa_compliant": boolean, // Meets NCAA rules
"institutional_notes": "string", // Internal compliance notes
"created_at": "ISO 8601 timestamp",
"updated_at": "ISO 8601 timestamp"
}Technical questions answered for development teams and IT directors implementing the Compliance API.
Ready to start your API integration?
Request API CredentialsGet sandbox access, technical documentation, and start building your integration in minutes. Our team will provision your credentials within 24 hours.
Week 1-2: Sandbox setup and initial testing
Week 3-4: Development and webhook
configuration
Week 5-6: UAT and production deployment
Most university IT teams complete integration in 4-6 weeks.
Complete this form to receive your sandbox credentials and documentation.