Skip to content

License Management

Each customer receives a license.key file, RSA-signed by the vendor, encoding:

  • Licensee name
  • Seat limit (agent seats)
  • Expiration date
  • Enabled feature tiers (e.g. ai_copilot, saml_sso)

license.key lives in the project root alongside install-onprem.sh (native) or is bind-mounted read-only into the backend container (Docker). Licensing is mandatory and RSA-signed — backend/vendor_public.pem verifies the signature; if it's missing or tampered with, all API mutation requests fail closed with 403 Forbidden.

Checking license status

  1. Log in as SUPER_ADMIN.
  2. Super Admin Console (top right) → License & Entitlements (/platform/license).
  3. View active agent seats, workspace caps, enabled feature flags, and days remaining.

Renewing / uploading a new license

  1. Go to /platform/license in the Super Admin Console.
  2. Drag and drop the new license.key, or click Upload Renewed License Key.
  3. The backend validates the RSA signature and refreshes seat limits and feature flags immediately — no restart required.

Replacing the license file directly (native/PM2)

If you're rotating the key as part of a scripted deploy rather than through the UI:

cp /path/to/new-customer.license.key ./license.key

No restart is needed — the backend re-validates the license from disk in the background every 60 seconds, so the change is picked up within a minute. To apply it immediately instead, use the UI upload path above, which invalidates the cache on the spot.