P1 // Foundational // Web Application

AL License System

The encrypted license server that protects your whole catalog. Issue keys on sale, validate them on boot, enforce per-server activation limits, revoke abuse, and let customers recover keys themselves. We run our entire store on it.

# validate from any product, any language
curl -X POST https://appleluis.ltd/api/license/validate \
  -H "content-type: application/json" \
  -d '{"key":"APLU-7K2M-9QXR-4WTB-H3PZ","product":"al-store","fingerprint":"srv-01"}'

# {"valid":true,"status":"active","activations_used":1,"max_activations":3}

What you get

Everything to run a license business

HMAC-signed keys

Keys carry a signed check group, so forged keys are rejected offline before any database hit. Real status lives in your datastore.

Activation binding

Bind a key to server fingerprints (IP, cfx code or domain) and cap how many installs a key allows. Move a key by deactivating an old slot.

Validate, revoke, expire

Active, revoked and expiry states, an append-only validation audit log, and per-key activation ledgers for support and abuse detection.

Drop-in API

One POST to /validate from any product in any language. A Node and a FiveM Lua client are included so you are validating in minutes.

Self-serve recovery

Customers recover keys by email without exposing whether an address has purchased. Less support load for you.

Cloudflare native

Runs on Pages Functions plus D1. No server to babysit, global edge latency, and it scales to zero cost when idle.

Don't want to host it?

We will install and maintain the license server for you on Overnight.Host from €5/mo: provisioning, the D1 database, secrets, updates and uptime. You just issue keys.

Questions

How many servers can one key run on?

This license allows 3 activations by default. You can change the activation cap per product in your own catalog. Need more? Contact us for a team or unlimited tier.

Do my customers need a database?

The license server uses Cloudflare D1. The included install docs walk you through creating it with one command. The managed option does it for you.

Can I protect products written in Lua or PHP?

Yes. Validation is a single HTTP POST, so any language that can make a request can validate. We ship Node and FiveM Lua clients as examples.