Features
Everything you need to ship licensed software
The complete licensing stack — from key generation to offline verification — as a service you run yourself.
License issuance
120-bit, human-readable keys in a clean charset (PROD-XXXX-XXXX-…). Keys are stored only as HMAC-SHA256 hashes with an application pepper — a database leak does not expose working keys. The raw key is shown exactly once; a masked display is used everywhere afterward.
Device activation & enforcement
Online activation tied to a device fingerprint, with per-license activation slots. Concurrency-safe limit enforcement (SELECT … FOR UPDATE + READ COMMITTED) means a license can never exceed its slot count, even under simultaneous requests — verified by a real MySQL concurrent-activation race test. Deactivate any device to free a slot.
Entitlements & feature flags
Define Products → Plans → Features, with feature values as JSON (booleans, numbers, strings). Grant features per plan and override per license — e.g. one customer gets max_projects: 50 instead of 10. Features are embedded in signed entitlement tokens the SDK verifies locally.
Offline licensing
Ed25519-signed entitlement files (libsodium) for air-gapped environments. Customers verify the file with the product’s embedded public key — no network call required. Offline revocation takes effect the next time the installation comes online.
Full license lifecycle
Suspend (reversible), revoke (terminal; outstanding entitlements invalidated), renew, and automatic expiry sweeps. Every state change emits a domain event — an audit log entry and an optional webhook.
Multi-tenant by design
Each vendor (Organization) is a fully isolated tenant. Tenant isolation is fail-closed at the query layer and covered by an explicit cross-tenant test matrix. Public identifiers are ULIDs — no enumerable IDs.
REST API
A stable /api/v1 contract for activate, validate, deactivate, floating checkout/checkin, and license & customer management. Idempotency keys on state-changing endpoints, cursor pagination, and rate limiting.
SDKs for every stack
Seven official SDKs — PHP, Node.js, Python, Go, Java, C#, and Rust — each with local Ed25519 entitlement verification.
Webhooks
HMAC-SHA256-signed payloads (X-Licenta-Signature header) for license.activated, license.revoked, and more. Automatic retries with exponential backoff, delivery logs, and a retry sweep — never delivered synchronously.
Vendor dashboard & customer portal
The dashboard covers products, plans, features, licenses, customers, and activations, plus a developer console (API keys, webhooks), security (audit logs, signing keys), and team management with roles. The customer portal lets end customers view their licenses and devices, activate/deactivate devices, and generate offline entitlements.
Billing
Stripe integration out of the box — failed payments automatically suspend the affected customer’s licenses.
Security & operations
2FA (TOTP) at login, role-based access control, append-only audit logs, GDPR export/erase, database backups, and health checks. Signing keys are generated and used server-side only — the private key never leaves the server.
At a glance
Feature matrix
| Feature | What it does | Available |
|---|---|---|
| License issuance | Generate 120-bit keys, hashed + masked display | ✓ |
| Device activation | Fingerprint-based activation with slot limits | ✓ |
| Concurrency safety | Row-locked activation; no over-activation | ✓ |
| Entitlements | Per-plan features + per-license overrides (JSON) | ✓ |
| Offline licensing | Ed25519-signed entitlement files | ✓ |
| Lifecycle | Suspend / revoke / renew / auto-expire | ✓ |
| Multi-tenancy | Fail-closed per-organization isolation | ✓ |
| REST API | Stable /api/v1 contract | ✓ |
| SDKs | PHP, Node, Python, Go, Java, C#, Rust | ✓ |
| Webhooks | HMAC-signed, retries + delivery logs | ✓ |
| Vendor dashboard | Products, licenses, customers, team, security | ✓ |
| Customer portal | View licenses, activate/deactivate devices | ✓ |
| Billing | Stripe + auto-suspend on failed payment | ✓ |
| Security | 2FA, RBAC, audit logs, GDPR export/erase | ✓ |
| Ops | Backups, health checks, Docker Compose | ✓ |
Start issuing licenses today.
Self-host on your infrastructure, or run the Docker Compose stack in minutes. Your keys, your data, your rules.