skills/sales-waitlister/SKILL.md
Waitlister platform help — pre-launch waitlist platform with hosted landing pages, points-based viral referrals, built-in email broadcasts, REST API, and five HMAC-signed webhook events. Use when choosing Free (100 subscribers) vs Launch (unlimited subs, referrals + broadcasts) vs Growth (API, webhooks, Klaviyo/Mailchimp/Kit sync, fraud detection unlock here) vs Business, building a webhook handler that verifies X-Webhook-Signature, webhooks auto-disabled after 10 consecutive failures, API signups bypassing referral fraud detection because client_ip/fingerprint weren't forwarded, granting bonus points or pulling top referrers via the API for reward fulfillment, broadcast send caps forcing an ESP handoff, automating without Zapier (Waitlister has none — webhooks/API only), or comparing Waitlister vs LaunchList/KickoffLabs/GetWaitlist/Prefinery. Do NOT use for list-growth strategy (use /sales-audience-growth) or LaunchList help (use /sales-launchlist).
npx skillsauth add sales-skills/sales sales-waitlisterInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
If references/learnings.md exists, read it first for accumulated platform knowledge.
What are you trying to do?
Where will signups happen? Hosted page / embed on your site (which builder?) / your own backend via API — drives install path and whether fraud params matter.
Where must the data end up? Stays in Waitlister / ESP (which?) / CRM / warehouse — drives whether you need Growth ($49) for API/webhooks/connectors.
Skip-ahead rule: if the user's prompt already contains enough context, skip to Step 2.
| If the question is about... | Route to... |
|---|---|
| General audience/list growth strategy across platforms | /sales-audience-growth [question] |
| LaunchList (one-time-pricing waitlists, no API) | /sales-launchlist [question] |
| KickoffLabs (waitlists + giveaways, Zapier, fraud webhooks) | /sales-kickofflabs [question] |
| UpViral (B2C sweepstakes/points campaigns) | /sales-upviral [question] |
| Multi-level referral/affiliate (L1/2/3, coupon groups) | /sales-referralhero [question] |
| No-code merge-tag newsletter referrals | /sales-referralkit [question] |
| ESP setup (Klaviyo, Mailchimp, Kit) | /sales-klaviyo, /sales-mailchimp, /sales-kit |
| Email marketing strategy once the list exists | /sales-email-marketing [question] |
If the question is Waitlister-specific, continue to Step 3.
Read references/platform-guide.md for the full reference — capabilities tagged by automation surface, pricing and plan gates, integrations, subscriber data model, quick-start recipes (server-side signup with fraud params, signed webhook handler, reward fulfillment via points API), integration patterns, and the comparison grid.
Read references/waitlister-api-reference.md for the API — base URL https://waitlister.me/api/v1, X-Api-Key auth, 5 endpoints with verbatim request/response JSON, page/limit pagination (max 100), per-plan rate limits (60/120 RPM), and all five webhook event payloads verbatim with the HMAC SHA-256 verification scheme.
Answer the user's question using only the relevant section. Don't dump the full reference.
Focus on the user's specific situation:
X-Webhook-Signature (HMAC SHA-256 over the raw body) and dedupe on X-Waitlister-Delivery — deliveries retry and are at-least-once.metadata.client_ip and fingerprint — server-side integrations silently lose referral fraud protection without them.points on update-subscriber is absolute, not incremental — read current points, then write the new total.If you discover a gotcha, workaround, or tip not covered in references/learnings.md, append it there.
Best-effort from research (2026-06-06) — review these, especially plan-gated features and pricing that may shift.
metadata.client_ip (and ideally fingerprint) are forwarded from the end user.points is a write-the-total field, not an increment — concurrent bonus grants can race; serialize updates per subscriber.is_pending_confirmation; pending signups that never confirm fire subscriber_pending_expired, not signup_created follow-ups./sales-audience-growth — List-growth strategy (lead magnets, referrals, cross-promotion across all platforms)/sales-launchlist — LaunchList (one-time-pricing waitlists, form POST + webhooks, no API)/sales-kickofflabs — KickoffLabs (waitlists + giveaways with REST API v1+v2, fraud webhooks, Zapier)/sales-upviral — UpViral (viral sweepstakes/rewards, API at Business+, Zapier/Make)/sales-referralhero — ReferralHero (full-stack referral/affiliate, multi-level L1/2/3, REST API)/sales-referralkit — ReferralKit (no-code merge-tag newsletter referrals)/sales-klaviyo — Klaviyo platform help (native connector destination)/sales-mailchimp — Mailchimp platform help (native connector destination)/sales-kit — Kit platform help (native connector destination)/sales-email-marketing — Email marketing strategy (what to send once you have the list)/sales-do — Not sure which skill to use? The router matches any sales objective to the right skill. Install: npx skills add sales-skills/sales --skill sales-do -a claude-codeUser says: "Launching a SaaS beta in 8 weeks. I want referral-driven signups and everything synced into Klaviyo automatically. Which Waitlister plan?" Skill does: Recommends Growth ($49/mo) — the Klaviyo connector, webhooks, API, and fraud detection all unlock there; Launch ($15/mo) covers referrals + broadcasts but exports are CSV-only. Notes unlimited subscribers from Launch up, the 10K/mo email cap on Growth, and that yearly billing is ~2 months free. Suggests sending segmented campaigns from Klaviyo rather than Waitlister broadcasts. Result: User picks Growth annual, connects Klaviyo, keeps Waitlister broadcasts for simple all-list updates.
User says: "How do I build a webhook handler for Waitlister signups that pushes them into HubSpot and credits referrers in real time?"
Skill does: Walks through Integrations → Webhooks → Manage with a secret set, then Recipe 2 from references/platform-guide.md: verify X-Webhook-Signature (HMAC SHA-256 over raw body, hmac.compare_digest), dedupe on X-Waitlister-Delivery, route waitlist.signup_created → HubSpot contact create and waitlist.referral_completed → referrer score bump, respond 2xx within 15s, and monitor for the 10-failure auto-disable.
Result: User has a verified, idempotent handler feeding HubSpot with referral attribution.
User says: "People are gaming our waitlist referral rewards with fake signups. We add some subscribers through our own backend too. What do we do?"
Skill does: Confirms fraud detection requires Growth+; for API-added subscribers, shows the metadata.client_ip + fingerprint params (without them API signups bypass detection entirely). Recommends double opt-in so unconfirmed referrals don't count, watching referral_completed webhooks for same-IP velocity, and fulfilling rewards from verified milestones (milestone_reached) rather than raw referral counts.
Result: User enables double opt-in + fraud params and gates rewards on verified milestones.
Symptom: Events arrived for days, then silence — no deliveries at all
Cause: The webhook auto-disabled after 10 consecutive failures (endpoint down, >15s responses, or non-2xx replies); it does not self-recover
Solution: Fix the endpoint first (respond 2xx in <15s; do slow work async), then manually re-enable under Integrations → Webhooks → Manage. Backfill the gap via GET /subscribers sorted by date. Add monitoring on the webhook's Active/Inactive/Disabled status.
Symptom: Same-IP or disposable signups counting toward rewards despite fraud detection being on
Cause: Signups came through the API without metadata.client_ip/fingerprint (detection has nothing to inspect), or plan is below Growth
Solution: Forward the real end-user IP and a browser fingerprint on every API signup. Enable double opt-in so unconfirmed emails never complete referrals. Gate reward fulfillment on milestone_reached events and spot-check top referrers via GET /subscribers?sort_by=referral_count before paying out.
Symptom: Rate limit exceeded. 60 requests allowed per minute. while paginating subscribers
Cause: Growth plan allows 60 requests/minute on subscriber endpoints (Business: 120); pagination max is 100 per page
Solution: Request limit=100, watch X-RateLimit-Remaining, and on 429 back off exponentially (docs suggest up to 30s max across 5 attempts) or sleep until X-RateLimit-Reset. For recurring syncs, prefer webhooks (push) over polling. Business doubles the limit if exports are routinely large.
tools
Wizlogo (wizlogo.com) platform help — a budget online logo maker (template/style-variation, marketed as "AI") plus a hub of FREE branding tools (business-name, blog-name and slogan generators, business-card maker, invoice generator, color converter, domain search). The pricing traps: the FREE logo is PERSONAL-USE-ONLY; the two cheap paid tiers are RASTER PNG/JPG only — Single (~€39.99 one-time) and Unlimited (~€3.99 per WEEK, recurring) — and VECTOR (SVG/PDF/EPS) is gated to the ~€299.99 Enterprise tier, which also bundles human designer edits and a social kit. Transparent PNG is on all paid plans. Use when making a Wizlogo logo, understanding free-vs-paid or personal-vs-commercial use, which tier unlocks vector/SVG for print, the weekly-subscription billing trap, its free name/slogan generators, or whether it has an API (UI-only — no public API, webhooks, Zapier or MCP). Do NOT use to just generate the business name (use /sales-namelix) or to compare/validate branding tools (use /sales-idea-validation).
tools
VistaPrint platform help (vistaprint.com, a Cimpress company) — the small-business design + print + digital-marketing platform: a free AI Logomaker (4 generations, 60 more after free sign-up) exporting SVG/PNG/PDF at 4000x4000 with no watermark, a free Brand Kit, business cards/flyers/signage/apparel/promo print, and a website builder. THE RIGHTS TRAP: VistaPrint states NO intellectual-property rights transfer on an AI-generated logo — you get usage rights but CANNOT register it for trademark or copyright; only its human designer service transfers full IP. Use when making a VistaPrint logo, asking if you own or can trademark it, running out of AI logo credits, printed colors not matching the screen, bleed/DPI/font file-prep rejections, or asking whether VistaPrint has an API (the consumer site does not — automation runs through the parent Cimpress Open partner-fulfilment API). Do NOT use for Vista Social scheduling (use /sales-vistasocial) or comparing logo tools market-wide (use /sales-idea-validation).
tools
Turbologo (turbologo.com) platform help — a budget AI/DIY logo maker: enter a business name + industry, pick icons and colors, and it proposes logo concepts you refine in an in-browser editor, then pay a one-time fee to download (designing is free, previews are watermarked, downloading is the paywall). Vector SVG/PDF is gated to the mid tier and up; the top tier adds a brand kit (business cards, letterheads, email signatures, social assets). Use when generating a logo in Turbologo, choosing which download tier to buy, vector SVG vs raster PNG, removing the free watermark, the time-limited edit-after-purchase window, pay-to-download pricing questions, whether an AI logo is yours to trademark, or whether Turbologo has an API to bulk-generate logos (it is UI-only — no public API, webhooks, Zapier, or MCP). Do NOT use to generate the business name (use /sales-namelix), compare or validate branding tools across the market (use /sales-idea-validation), or build wider marketing creative (use /sales-canva).
tools
Online Logo Maker (onlinelogomaker.com) platform help — a long-standing free/freemium DIY logo maker: build the mark yourself from icons, shapes, text, and fonts — MANUAL/template-based, NOT enter-a-name-get-AI-concepts. The free pack downloads a LOW-RES 300px PNG with a background; vector SVG, transparent PNG, and 2000px high-res are gated to a one-time lifetime Premium pack (not a subscription). The free tier's commercial-use rights are disputed by reviewers — clean ownership effectively needs Premium, and a shared-icon mark can be non-distinctive. Use for building/editing a logo here, free download vs Premium, vector SVG or transparent PNG, one-time pricing, commercial-use/trademark terms, near-namesake confusion (NOT LogoMaker.com / LogoMakr / Logomakerr.ai), or whether it has an API (UI-only — no API, webhooks, Zapier, MCP). Do NOT use to generate the business name (use /sales-namelix), compare branding tools across the market (use /sales-idea-validation), or build wider creative (use /sales-canva).