Secure every API call.
Control every license.

curl -X POST https://YOUR_HOST/api/v2/check \
  -H "Content-Type: application/json" \
  -d '{
    "product": "my-plugin",
    "lease_token": "mbl_xxxxxxxx",
    "site_url": "https://example.com",
    "instance_id": "a1b2c3d4",
    "app_version": "1.8.0",
    "environment": "production",
    "signature_version": 2,
    "request_ts": 1760000000,
    "request_nonce": "random-nonce-123",
    "request_signature": "<hmac>"
  }'

$res = wp_remote_post( 'https://YOUR_HOST/api/v2/check', [
  'headers' => [ 'Content-Type' => 'application/json' ],
  'body'    => wp_json_encode( [
    'product'     => 'my-plugin',
    'lease_token' => $lease,
    'site_url'    => home_url(),
    'instance_id' => $instance,
    'app_version' => MY_PLUGIN_VERSION,
    /* + signature v2 fields */
  ] ),
] );

const res = await fetch('https://YOUR_HOST/api/v2/check', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    product: 'my-plugin',
    lease_token: leaseToken,
    site_url: location.origin,
    instance_id: instanceId,
    app_version: '1.8.0',
    /* + signature v2 fields */
  }),
});
const data = await res.json();

import requests
r = requests.post("https://YOUR_HOST/api/v2/check", json={
    "product": "my-plugin",
    "lease_token": lease_token,
    "site_url": "https://example.com",
    "instance_id": instance_id,
    "app_version": "1.8.0",
    # + signature v2 fields
})
print(r.json())