API
Validate, issue and revoke, over plain HTTPS. Read the docs without an account.
Everything the panel can do, the API can do, because the panel is a client of it. Scoped API keys mean a key baked into a downloadable build can validate licenses and nothing else.
What it does
Scoped keys
A key baked into a downloadable build so it can issue a license on first run cannot read your customers, and a key that validates licenses cannot issue them. A fresh key has only license.validate unless you ask for more.
Webhooks for what happens
Sales, activations and refusals, signed so you can check they came from Bloom. Point one at a channel and watch it happen.
Rate limits that scale with your plan
Free gets a baseline; Pro and above get five times the requests per key and per IP, up to twenty times on Business.
Docs you can read first
The quickstart and every endpoint are readable without an account. Making an account is only needed the moment you want your own key.
Reading the docs before signing up
Visit /docs and validate a test key with curl, in the browser, before deciding whether to make an account at all.