List project licenses

Fetch all license keys associated with a specific project.

This endpoint returns the project’s licenses in reverse chronological order (latest first), using cursor pagination.

Endpoint

GET /project/{project}/licenses

Full URL:

https://api.devpayr.dev/api/v1/project/{project}/licenses

Authentication

✅ Required: API Key

Send your API key using:

X-API-KEY: <your_api_key>

This endpoint does not accept license authentication. It’s meant for dashboards/admin tools that manage licenses.

Path Parameters

Parameter	Type	Required	Description
project	integer	Yes	The ID of the project whose licenses you want to list.

Access Rules

DevPayr enforces strict project access before listing licenses:

Project-scoped API keys

If your API key is scoped to a project, it must match the {project} in the URL.

Error (403)

{ "message": "This API key cannot view licenses for this project." }

Global API keys

If your API key is global, it must belong to the same user who owns the project.

Error (403)

{ "message": "You do not have access to this project." }

Query Parameters

Parameter	Type	Required	Description
per_page	integer	No	Number of results per page. Default 20. Maximum 50.
cursor	string	No	Cursor token for pagination (from next_cursor).

Pagination Notes

This endpoint uses cursor pagination:

• The response includes data.next_cursor

• If next_cursor is null, there are no more pages

• To fetch the next page, pass the cursor back as a query param

Next page example

curl -X GET "https://api.devpayr.dev/api/v1/project/2/licenses?per_page=20&cursor=YOUR_NEXT_CURSOR" \
  -H "Accept: application/json" \
  -H "X-API-KEY: YOUR_API_KEY"

Response

Success (200)

DevPayr returns the standard response envelope:

• data.data → array of license records

• data.next_cursor → token for the next page (or null)

• errors → null on success

Example Response

{
  "status": "success",
  "message": "Success",
  "data": {
    "data": [
      {
        "id": 1,
        "project_id": 2,
        "domain_id": null,
        "title": "Regular",
        "uuid": "019ae565-2115-7172-8729-9e48df5c113d",
        "is_active": true,
        "expires_at": null,
        "max_domains": "6",
        "is_unlimited_domains": false,
        "is_unlimited_subdomains": false,
        "is_test_license": false,
        "allowed_ips": null,
        "allowed_countries": null,
        "allow_ui_update": true,
        "allow_configs": false,
        "last_verified_at": null,
        "max_subdomains_per_domain": "1",
        "max_usage_per_day": "1",
        "issued_from_ip": "102.90.101.2",
        "meta": [],
        "created_at": "2025-12-03T18:06:41.000000Z",
        "updated_at": "2025-12-03T18:06:41.000000Z"
      }
    ],
    "next_cursor": null
  },
  "errors": null
}

What is the License Key?

In DevPayr, the license key is the value in:

✅ uuid

Example:

"uuid": "019ae565-2115-7172-8729-9e48df5c113d"

That uuid is what a customer or SDK user supplies as the license key (via X-LICENSE-KEY header or license query/body, depending on the endpoint).

Fields Returned

This endpoint intentionally hides some internal license fields.

Hidden fields

These fields exist internally but are not returned here:

• validate_against

• uuid_hash

• user_id

Everything else on the license record may be returned depending on your model structure.

Caching Behavior

This endpoint caches results per API key + project + query params.

• Cache TTL: 15 minutes

• Cache key includes:

  • API key ID

  • project ID

  • query parameters (per_page, cursor, etc.)

If you create/revoke licenses and don’t see changes immediately, the list may still be cached until the TTL expires.

Errors

Missing API Key (401)

{ "message": "Missing required X-API-KEY header." }

Invalid / Expired API Key (403)

{ "message": "Invalid or expired API key." }

Unauthorized (403)

Project-scoped mismatch:

{ "message": "This API key cannot view licenses for this project." }

Global key not owner:

{ "message": "You do not have access to this project." }

Project Not Found (404)

{ "message": "Resource not found." }

Rate Limited (429)

{ "message": "Rate limit exceeded (X requests/min). Please slow down." }