A checkout bot for limited drops
Hidden AIO is a desktop bot that checks out limited products the second they drop. We built the app, the checkout engine behind it, and the licensing that sells it on Whop.
- Product
- Desktop checkout bot
- Runs on
- Windows, macOS and Linux
- Sold on
- Whop
17
retail sites and platforms it checks out on
142
Shopify stores set up out of the box
The problem
Limited drops sell out in seconds.
Sneakers, collectibles and toys from places like Pokemon Center, PopMart and Walmart can sell out before a person finishes typing a card number. Every site checks out in its own way, and most of them have bot protection on top.
A bot that only works on one site isn’t worth much. Hidden AIO had to handle many sites, keep up when those sites change, and still be simple enough for a buyer to set up.
What we built
One app that runs the whole checkout.
The desktop app
An Electron and React app. Users set up tasks, profiles, proxies, accounts and captcha harvesters, then watch every checkout on a live dashboard. Wins and failures post to their own Discord.
The checkout engine
A Go engine runs every task. The app downloads it after the license check and talks to it over gRPC. Each site has its own module and modes, like normal, monitor, restock, preload and turbo.
Monitoring and restocks
Monitor modes watch a product and start the checkout the moment it’s in stock. Shopify tasks can also preload a cart or wait for a restock.
Captchas and bot protection
Captchas get solved through 2Captcha, CapSolver or built-in harvester windows, including reCAPTCHA, hCaptcha, Turnstile and GeeTest. The engine also gets through Akamai, DataDome, ThreatMetrix and Cloudflare checks, with a Chrome browser fingerprint and rotating proxies.
Accounts and payments
Account groups with logins, session refresh, email codes over IMAP and two-factor codes. Payment steps cover each site’s card encryption and 3D Secure checks.
Licensing and updates
Users buy on Whop and activate with a license key tied to their machine. The app checks the key every two minutes and closes if it’s been turned off. App updates install on their own.
Where it ended up
A paid product, rebuilt on Go.
Hidden AIO started with site modules written in Node. In 2025 we moved checkout into a separate Go engine. By July 2025 every site ran on Go and the old Node modules were gone.
The app and engine are built for Windows, macOS and Linux, and Hidden AIO is still listed on Whop.
Want something like this built?
Tell us what you want to build. We’ll tell you how we’d build it.