Developer documentation

License anything.
Verify it anywhere.

Online and offline license enforcement for software, SaaS, games, and audio plugins. A plain REST API, an open token format, and SDKs when you want them.

Quickstart API reference

Works from any language with an HTTP client. No SDK required.

# Is this license valid right now?
$ curl -sX POST \
    https://api.waveformanager.com/v1/validate \
    -H 'content-type: application/json' \
    -d '{"key":"ACME-7F3K-9QPD-2MXR","instanceId":"sess_123"}'

200 {
  "ok": true,  "status": "active",
  "features": ["pro"],
  "sessions": { "used": 1, "max": 3 }
}

# Activate once, then verify the signed token locally forever
$ curl -sX POST \
    https://api.waveformanager.com/v1/activate \
    -d '{"key":"ACME-7F3K-9QPD-2MXR","fingerprint":"…","deviceName":"Studio Mac"}'

200 {
  "token": "eyJ….kL4c…",   // Ed25519, verified offline
  "publicKey": "VXdx…"
}

Online

Web apps, SaaS, APIs, online games

Ask the API on every use. Revocation is instant, with concurrent-session limits and usage metering built in.

Online integration →Offline

Desktop apps and audio plugins

Activate once. A signed token verifies locally on every launch, with quiet renewal and device management.

Offline integration →

Pick your stack

JUCEDrop-in activation UI and offline engine for VST3, AU, and AAX.TypeScriptZero-dependency SDK for Node and Electron.RESTPlain JSON over HTTPS from Python, Go, .NET, Swift, Rust, PHP.Token formatVerify offline tokens in any language with an Ed25519 library.

Unforgeable offline tokens

Ed25519 signatures bound to the machine and the product. Clients embed only a public key.

Revocation that arrives

Short leases and background renewal carry refunds and bans to machines in the field.

Never locks out a customer

Fails open on a network error, closed only on a definitive verdict from the server.