paywall-worker

No app selected

Pick an app on the left, or create your first app with the button below.

Create new app

Adding an app requires no code change or redeploy. Type a name — the id and key prefix derive automatically.

1Identity

2Pricing

3Stripe

4Create

What's your app called?

The id and key prefix will be derived automatically.

App name

id auto

keyPrefix auto

Device limit

devices per license

How much does it cost?

Pick a template or add tiers one at a time.

Connect Stripe

Map your Stripe price IDs to tiers. You can skip this and use metadata.tier in Checkout instead.

Sender email (optional)

Used for license delivery emails

Ready to create

Review everything below, then create your app.

—

Licenses 0

revoked suspicious

ID	Email	Source	Tier	Expires	Devices	Flags	Created	Actions
No licenses yet.

Generate redeem batch

count * tier * validity *

Validity is the redemption window AND the issued license's expiry (the current single-field semantic). Codes are shown once at generation — copy them immediately. They become device-bound on first redemption.

0 codes copy all

Existing codes 0

Delete revokes an unused code permanently (audited). Used codes are kept as redemption records.

Code	Status	Tier	Created	Expires	License	Actions
No codes yet.

Release channel

One config drives both the in-app update check (GET /v1/{appId}/version) and the Sparkle feed (GET /v1/{appId}/appcast.xml). Publishing replaces the whole config; the current latest is archived into history automatically (build-deduped).

— appcast: —

version build rollout %

dmg URL

min OS size (bytes)

EdDSA signature release notes

policy floors (0 = off): critical ≤ recommended ≤

archive current latest into history

History

Older releases served in the appcast feed (newest first). Managed by archiving; edit history only via API if you must.

Version	Build	Published	URL	Notes
Nothing published yet.

Check simulator

What a client on a given build is told right now (public endpoint, live).

Usage snapshots 0

Opt-in only. One latest snapshot per installation (overwritten on each upload), self-expiring after 90 days. IPs are never stored. Metric vocabulary is client-defined.

Received	Install	App	OS	Model	License	Metrics	Flags
No snapshots yet.

Devices 0

Devices active in the last 90 days (activation + telemetry retention window) — not lifetime installs. Join of license activations × telemetry; the join key is deviceId = installationId.

Device	Model	OS	Version	License	Email	Expires	First seen	Last online
No devices yet.

Audit log 0

Latest 100 entries, newest first. Click a blue id/email to jump to it.

At	Actor	Action	Target	Detail
No entries yet.

App configuration

Edit tiers, price mappings, and limits. The id, keyPrefix, and signing keys are immutable; issued licenses keep their signed entitlements. Changes propagate within ~60s (KV eventual consistency).

Basics Saved by Save configuration at the bottom of this card — the button lights up as soon as anything changes, and Enter saves.

App name

Default activations (devices per license)

License-email sender (from) Key-delivery emails (redeem / lookup) send from this address; requires the Resend API key (sidebar).

Encrypt client API requests/responses (AES-256-GCM)

When ON, activate / lookup / claim / redeem / telemetry (and config/version responses) carry AES envelopes instead of plaintext JSON. Ship a client that speaks the envelope BEFORE enabling — old clients break the moment it flips. Webhook, appcast.xml and claim-session (thanks page) stay plaintext.

Tiers Same editor as create — defaults to {tier: name}.

Stripe prices

Purchase links (Stripe Payment Links)

In Stripe: Products → Payment Link → create one per tier, then paste the URLs here. Clients fetch them from and render their Buy buttons — updating a link here updates every client instantly, no release needed.

Launch preflight

What your buyers will see right now. Run this before going live.

Rotate signing key

Generates a new Ed25519 keypair. The previous public key is retained as KeySet.previous so already-issued licenses keep verifying during the overlap window.

Signing keys

The current publicKeyHex embedded in clients. After a rotation the previous key stays verifiable during the overlap window — ship a client that trusts both.

Maintenance

Removes activation records older than 90 days. Also runs daily via cron. Audit entries are preserved.

Dashboard

Ops & Activity

Apps