The licensing layer for game keys.

Issue, activate and revoke single-use keys over a JSON API. Signed responses, idempotent writes, webhook delivery with retries. Environment: test — credentials are prefixed accordingly, billing is off.

● operational test environment api v2026-04-01 signed responses preorders 18 regions

First request

curl http://localhost:4242/v1/products \
  -H "Authorization: Bearer sk_sandbox_9f3a1c7d2b8e4a6f0c5d7b9a"

curl -X POST http://localhost:4242/v1/licenses \
  -H "Authorization: Bearer sk_sandbox_9f3a1c7d2b8e4a6f0c5d7b9a" \
  -H "Content-Type: application/json" \
  -H "X-Idempotency-Key: order_1041" \
  -d '{"product_id":"prod_cyberdrift","customer":{"email":"buyer@example.com"}}'

Trending now

180 SKUs on the shelf. Grand Theft Auto VI — all four editions, PS5 and Xbox, on sale now, keys activate on 2026-11-19. Behind it: 140 games, PS Plus / Game Pass / NSO, PSN / Xbox / Steam / eShop gift cards, Windows, Office, Adobe, DaVinci.

Stores

Keys are issued in the store's native format — Steam 5‑5‑5, Xbox 25 characters, PSN 4‑4‑4, Nintendo 16 — with the store's region rules and redeem URL attached. Registry: GET /v1/platforms.

Endpoints

POST /v1/licensesIssue one or many keys for a product.

POST /v1/licenses/:key/validateCheck a key before showing it to a customer.

POST /v1/licenses/:key/activateBind a key to a device seat.

POST /v1/licenses/:key/revokeKill a key after a chargeback.

GET /v1/licenses/:key/receiptInvoice payload for the order.

POST /v1/webhooks/endpointsSubscribe to license events.

Reference

OpenAPI 3.1 spec: /openapi.yaml · errors: /errors · agent brief: AGENTS.md · docs: ./docs.