Authentication
Authentication
All LicenseSeat API requests require authentication via your publishable API key.
Your Publishable Key
Find your API key in the LicenseSeat dashboard under Settings → API Keys.
Your publishable key (pk_live_...) is designed for client-side use:
- Safe to embed in desktop apps, mobile apps, and distributed code
- Permanent — one key per organization, never changes, can't be revoked
- Always visible in your dashboard (copy it anytime)
let client = LicenseSeat(apiKey: "pk_live_xxxxxxxx")
Usage
Include your API key in the Authorization header:
Authorization: Bearer pk_live_xxxxxxxxxxxxxxxxxxxxxxxx
Or via curl:
curl -X POST https://licenseseat.com/api/v1/products/my-app/licenses/XXXX-XXXX/validate \
-H "Authorization: Bearer pk_live_xxxxxxxx" \
-H "Content-Type: application/json" \
-d '{"device_id": "device-unique-id"}'
What You Can Do
With your publishable key, you can:
- Validate licenses
- Activate and deactivate devices
- Fetch releases and download tokens
- Generate offline license tokens
These are all the operations your app needs to verify and manage licenses.
Coming soon: Secret keys (
sk_live_...) for server-side operations like creating licenses, revoking licenses, and other privileged actions via API.
Error Responses
| Error | Code | Fix |
|---|---|---|
| Missing API key | authentication_required |
Add Authorization header |
| Invalid API key | invalid_api_key |
Check key in dashboard |
See Error Codes for complete reference.