API v1

API Reference

Protection API endpoints for license verification and heartbeat.

POST /api/protection/license/verify

Validates license key, IP binding, subscription status, and returns allowed features.

POST /api/protection/license/verify
Content-Type: application/json

{
  "licenseKey": "BW-XXXX-XXXX",
  "accountId": "customer_123",
  "loginServerIp": "203.0.113.10",
  "gameServerIp": "203.0.113.11",
  "serverPort": 7777,
  "chronicle": "High Five",
  "protectionBuild": "1.0.0",
  "clientHash": "...",
  "hwidHash": "...",
  "timestamp": 1710000000,
  "nonce": "random-string",
  "signature": "hmac-sha256"
}

POST /api/protection/license/heartbeat

Reports server status, player count, and protection metrics. Keeps license active.

POST /api/protection/license/heartbeat
Content-Type: application/json

{
  "licenseKey": "BW-XXXX-XXXX",
  "accountId": "customer_123",
  "serverIp": "203.0.113.11",
  "onlinePlayers": 1200,
  "protectionBuild": "1.0.0",
  "uptime": 36000,
  "detectedAttacks": 15,
  "blockedBots": 42,
  "timestamp": 1710000000,
  "nonce": "random-string",
  "signature": "hmac-sha256"
}

Request Security

All requests require HMAC-SHA256 signature, unique nonce, and timestamp within 60 seconds.

API Reference