Base URL

/wp-json/pilot-license-manager/v1

All routes use POST with JSON. License keys are bearer secrets; use HTTPS and a stable, random instance identifier.

Activate

POST /activaten{n  "license_key": "PLM-ABCDE-FGHIJ-KLMNO-PQRST",n  "instance_id": "site-unique-id",n  "instance_name": "Production Site"n}

Returns success for a new or already-active instance. Returns HTTP 409 if the activation limit is reached.

Validate

POST /validaten{n  "license_key": "...",n  "instance_id": "site-unique-id"n}

The instance ID is optional. Successful responses include status, product ID, expiry, activation limit/count, and instance state.

Deactivate

POST /deactivaten{n  "license_key": "...",n  "instance_id": "site-unique-id"n}

Authentication and security

The routes intentionally use the license key as the bearer credential and do not require WordPress login. Version 0.1.1 does not implement rate limiting. Protect keys, use HTTPS, and consider edge rate limiting.