Planned · phase 2

License API

Integrate key activation into your software or website. Each product gets its own API key; licenses are bound to a hardware ID (desktop apps) or a domain (web apps).

Endpoints

POST
/api/v1/licenses/activate

Bind a key to a device (HWID) or domain on first use. Starts the license timer.

POST
/api/v1/licenses/validate

Check a key on every app launch. Returns status, expiry and plan.

POST
/api/v1/licenses/reset-hwid

Unbind the device so the key can be used on a new machine (needs an HWID Reset key).

Request

POST /api/v1/licenses/validate
Authorization: Bearer <PRODUCT_API_KEY>
Content-Type: application/json

{
  "key": "ARCS-7K2QM-PX9RT-4HVNA-ZD3WE",
  "hwid": "b4f1c9…e02",          // device fingerprint, or "domain" for websites
  "version": "1.4.2"
}

Response

200 OK
{
  "valid": true,
  "status": "active",              // active | expired | banned | hwid_mismatch
  "product": "arc-studio",
  "plan": "1 Month Key",
  "expiresAt": "2026-11-22T13:05:00Z",
  "signature": "ed25519:…"         // verify offline with the public key
}

Client example

// Node / Electron example
const res = await fetch("https://your-shop.com/api/v1/licenses/validate", {
  method: "POST",
  headers: { "Content-Type": "application/json", Authorization: `Bearer ${PRODUCT_API_KEY}` },
  body: JSON.stringify({ key, hwid: await getHwid(), version: app.getVersion() }),
});
const lic = await res.json();
if (!lic.valid) showActivationScreen(lic.status);