POST https://api.luaprotect.dev/v1/keys/validate

Validate and check a license key for your account programmatically. Perfect for custom software loaders, Discord bots, web dashboards, Python scripts, or custom games. Supports optional device HWID binding on redemption.

Body Parameters

• keyCode (string, required) — The activation key string to check (e.g. "LP-ABC123XYZ"). Also accepts "key".
• hwid (string, optional) — Device Hardware ID (HWID) to check against or bind to.
• bindHwid (boolean, optional) — If true and the key is an unredeemed single-device key, automatically binds the provided HWID.
• scriptId (string, optional) — Optional script ID to ensure the key belongs to a specific script.

Example Request

curl -X POST "https://api.luaprotect.dev/v1/keys/validate" \
  -H "Authorization: Bearer LUAP-YOUR_API_KEY_HERE" \
  -H "Content-Type: application/json" \
  -d '{
    "keyCode": "LP-ABC123XYZ",
    "hwid": "device_hwid_sample",
    "bindHwid": true
  }'

Example Response

{
  "valid": true,
  "key": {
    "id": "key_77192b",
    "keyCode": "LP-ABC123XYZ",
    "keyType": "redeem",
    "status": "active",
    "hwid": "device_hwid_sample",
    "expiresAt": "2026-09-02T12:00:00.000Z",
    "scriptId": "scr_88192a",
    "usedCount": 1,
    "note": "Customer license",
    "createdAt": "2026-09-01T02:00:00.000Z"
  }
}