Open source · Free to start · v1.0.0

Secure license

management

for your software.

Generate, activate, and revoke software licenses with one SDK call. Machine-bound. Auto-renewing. Zero redeploy.

Machine-boundAuto-renewingOne SDK callZero redeploy

Node.jsPython.NET

app.keybox.dev/dashboard

KeyBox

Validating machine ID…

Live

Total

Active

Revoked

ClientKeyStatus

Acme Corp

ProTracker

KB-A3F9-••••ACTIVE

Nexus Labs

BuildBot

KB-C12E-••••REVOKED

Orbit Media

CMS Pro

KB-77F1-••••ACTIVE

Acme Corp68%

Orbit Media91%

activate.js

How it works

From zero to enforced licensing in under 5 minutes.

Create a license key

Add a client and project in the KeyBox dashboard. A unique license key is generated instantly — no code required.

No codeInstant keyExpiry control

Create a license key

Add a client and project in the KeyBox dashboard. A unique license key is generated instantly — no code required.

No codeInstant keyExpiry control

Embed the SDK

Drop one function call into your app. The SDK activates the license, registers the machine, and starts enforcing on every request.

Node.jsPython.NET

Embed the SDK

Drop one function call into your app. The SDK activates the license, registers the machine, and starts enforcing on every request.

Node.jsPython.NET

KeyBox handles the rest

Background validation every 15 minutes. Automatic renewal pickup. Revoke or expire from the dashboard — no redeploy needed.

Auto-renewalOffline graceZero restarts

KeyBox handles the rest

Background validation every 15 minutes. Automatic renewal pickup. Revoke or expire from the dashboard — no redeploy needed.

Auto-renewalOffline graceZero restarts

Why not just build it yourself?

You could. But license enforcement has more edge cases than it looks.

Without KeyBox

With KeyBox

Write custom validation logic for every project

One SDK call — activation, validation, expiry all included

Build expiry tracking and renewal notifications yourself

Set an expiry date in the dashboard, SDK enforces it automatically

Implement machine binding to prevent key sharing

Machine ID and instance ID binding built in, server-verified

Handle offline scenarios — keep app alive or kill it?

Configurable offline grace period, then auto-block after timeout

Restart your app to pick up license renewals

Daemon polls every 15 min — renewals go live with zero restarts

Manually revoke and re-deploy to enforce license termination

Revoke from the dashboard — blocked on next validation tick

Powerful Features

Everything you need to manage licenses efficiently.

Node.jsPython.NET

// Node.js
protectNodeApp({ app, port: 3000, key })

# Python
protect_fastapi_app(app=app, key=key)

Multi-Language SDK

One call per language. Node.js, Python, and .NET all ship the same guarantees.

License KeyACTIVE

KEY‑2F9A‑7B3E‑C41D

Expires Dec 31, 2025

Instant Key Generation

Unique, cryptographically secure keys with expiry control — generated in milliseconds.

machineId

a3f9b2c1e847d056f3a21c98b4e7...

SHA-256 · verified

Machine Binding

One key, one machine. SHA-256 hardware fingerprint prevents key sharing across devices.

Lifecycle24 days left

ActivatedExpires

Auto Expiry

Set an expiry date and walk away. The SDK enforces it automatically on every validation tick.

Security First

Server-verified machine IDs, atomic activation, and fail-closed enforcement on every unrecognised response.

Server unreachable

Still ACTIVE

Grace period · 16 min remaining

Offline Grace Period

When the server is unreachable, apps stay ACTIVE for a configurable window before blocking.

ACTIVE

─ dashboard toggle ─→

REVOKED

≤ 15 min propagation

✓Requests pass through normally while ACTIVE

✗All requests return HTTP 402 after revocation

Real-time Revocation

Toggle a license off in the dashboard. No redeploy, no restart — blocked within the next validation cycle.

SDK Usage

Integrate KeyBox into your application with our SDK

Quick Start

One call wraps your Express app with license enforcement, starts the background validation daemon, and calls app.listen().

index.js

1import express from "express"
2import { protectNodeApp } from "keybox-sdk"
3 
4const app = express()
5 
6app.get("/", (_req, res) => {
7  res.send("Your app is licensed and running.")
8})
9 
10await protectNodeApp({
11  app,
12  port: 3000,
13  productName: "MyApp",
14  key: process.env.KEYBOX_LICENSE_KEY,
15})

Activates the license on first run, writes .instance-id to disk
Returns HTTP 402 on all requests while inactive
Revalidates every 15 minutes — picks up renewals automatically, no restart needed

Frequently asked questions

Things developers ask before integrating.

Ready to protect your software?

Add license enforcement in under 5 minutes. Free to get started — no credit card required.