Skip to main content

Developer Portal

REST API + Webhook endpoints for license validation, status, and platform integration. UK GDPR + ICO compliant. Production-ready endpoints only — no beta APIs documented here.

Authentication

All API endpoints (except the public status endpoint) require an API key.

Obtain a key from your customer portal under Settings → API Keys. Each key is scoped to one license; cross-license access requires separate keys.

# Request header
Authorization: Bearer sbh_live_xxxxxxxxxxxxxxxxxxxxxxxx

Endpoints

POST/api/v1/license/validateAPI key

Validate a license key

Check whether a license key is valid, active, and not expired. Returns license metadata.

GET/api/v1/license/infoAPI key

Get license metadata

Retrieve product, customer, and expiry details for an authenticated license.

POST/api/v1/webhooks/subscribeAPI key

Subscribe to webhook events

Register a URL to receive events (license.activated, license.expired, etc.).

GET/api/public-statusNone

Public platform health

Operational status of platform components, last-checked timestamps, and uptime.

Full OpenAPI 3.1 spec available on request — email [email protected] with subject "OpenAPI Spec Request" — we'll send the latest JSON.

Webhooks

Events you can subscribe to:

  • license.activated — License key first activated by an end user.
  • license.expired — License reached expiry timestamp.
  • license.renewed — License extended via renewal flow.
  • subscription.canceled — Subscription canceled (downstream of Stripe webhook).

Webhook payloads are signed using HMAC-SHA256 with your subscription secret. Verify the signature before processing.

Security

  • • TLS 1.2+ required (we reject older versions)
  • • Rate limits: 600 req/min per key (burst 120). Higher limits available on request.
  • • All requests logged in our tamper-evident AuditLog (hash chain, indefinite retention).
  • • Per UK GDPR Article 30 + ISO 27001 A.12.4, you can request your processing records.
  • • Keys can be rotated at any time from the portal; old keys remain valid for 7 days during rotation.

Questions? Email [email protected].

SummitBridge Horizon Ltd · Companies House 16419201 · ICO ZC112810 · 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ