Self-hosted license authority

Control who runs your software.

Issue licenses, bind devices, revoke access, and verify signed sessions from infrastructure you own.

Open control plane Inspect architecture
Precision-machined vault core representing cryptographic access control
Ed25519 signedEvery successful client response
Hashed secretsKeys are never stored in plaintext
Device awareConfigurable installation limits
API firstClient and seller contracts included

One control plane. Every product.

Each application gets isolated users, plans, licenses, signing keys, seller keys, webhooks, sessions, and audit history.

Server truth, verified locally

Product clients verify signed responses with a public key. Private signing material never leaves your server.

{
  "success": true,
  "data": {
    "license": {
      "status": "ACTIVE",
      "plan": "Standard"
    },
    "nonce": "client-nonce"
  },
  "algorithm": "Ed25519",
  "signature": "base64url-signature"
}

Immediate enforcement

Suspension and revocation terminate active sessions. Heartbeats re-check server state.

Revocation aware

Operational evidence

Administrative changes are attributed and recorded with request metadata.

Append-only audit

Portable by design

Run one stateless web service against PostgreSQL. Scale horizontally when product traffic grows.

product client
      |
      | HTTPS + nonce
      v
Keyforge API  --> PostgreSQL
      |
      | signed webhook
      v
your operations stack