API overview

Integrate Meridian licensing into your application with a single REST endpoint.

Endpoints

MethodPathDescription
POST/api/v1/license/verifyValidate a license key and return entitlements
POST/api/v1/license/activateBind a license to a hardware fingerprint
POST/api/v1/license/resetRelease a hardware lock for re-activation

Authentication

Every request must include an Authorization header with your application secret. The secret is provisioned per-product in the dashboard.

Authorization: Bearer mrd_live_xxxxxxxxxxxxxxxx

Rate limits

Verify

60 / min

Activate

10 / min

Reset

5 / min

Burst

2x limit

Exceeded limits return 429. Retry-After header included.

Error shape

All errors follow a consistent JSON envelope:

{
  "error": {
    "code": "LICENSE_EXPIRED",
    "message": "The license has expired.",
    "detail": null
  }
}

INVALID_KEY — malformed or unknown license key

HWID_MISMATCH — fingerprint does not match bound device

LICENSE_EXPIRED — subscription or perpetual window ended

RATE_LIMITED — too many requests, back off