License

Get license status

License state for self-hosted installs: whether licensing is enforced, the current state (unlicensed/valid/expired/grace_exceeded/invalid), signed entitlements (seat, domain, repo, developer, pentest, and concurrency limits plus feature flags), expiry, and install-wide aggregate usage counts. Licenses are verified offline from a signed token, so there is no sync (last_synced_at is always null). On SaaS this always reports enforced=false. Requires the license:read scope. Personal tokens must belong to an org admin (service tokens are admin-issued and exempt).

GET

license

Error

A valid request URL is required to generate request examples

{
  "enforced": true,
  "state": "unlicensed",
  "customer_name": "<string>",
  "license_type": "<string>",
  "expires_at": "<string>",
  "last_synced_at": "<string>",
  "entitlements": {
    "max_dashboard_users": 123,
    "max_domains": 123,
    "max_repos": 123,
    "max_developers": 123,
    "max_pentests_per_month": 123,
    "max_concurrent_scans": 123,
    "pr_reviews_enabled": true,
    "on_demand_pentests_enabled": true,
    "chat_enabled": true
  },
  "usage": {
    "domains": 123,
    "repositories": 123,
    "pentests_this_month": 123,
    "running_scans": 123,
    "active_developers_this_month": 123,
    "pr_reviews_this_month": 123,
    "chats_this_month": 123
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

Authorizations

Authorization

string

header

required

API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.

Response

License status

enforced

boolean

state

enum<string>

Available options:

unlicensed,

valid,

expired,

grace_exceeded,

invalid

customer_name

string | null

license_type

string | null

expires_at

string | null

ISO date. A null value means the license never expires

last_synced_at

string | null

Always null: licenses are verified offline, nothing syncs

entitlements

object | null

Show child attributes

usage

object | null

Show child attributes

Error

A valid request URL is required to generate request examples

{
  "enforced": true,
  "state": "unlicensed",
  "customer_name": "<string>",
  "license_type": "<string>",
  "expires_at": "<string>",
  "last_synced_at": "<string>",
  "entitlements": {
    "max_dashboard_users": 123,
    "max_domains": 123,
    "max_repos": 123,
    "max_developers": 123,
    "max_pentests_per_month": 123,
    "max_concurrent_scans": 123,
    "pr_reviews_enabled": true,
    "on_demand_pentests_enabled": true,
    "chat_enabled": true
  },
  "usage": {
    "domains": 123,
    "repositories": 123,
    "pentests_this_month": 123,
    "running_scans": 123,
    "active_developers_this_month": 123,
    "pr_reviews_this_month": 123,
    "chats_this_month": 123
  }
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

{
  "detail": "<string>",
  "code": "<string>",
  "required_scope": "scans:read",
  "docs": "<string>",
  "hint": "<string>"
}

Scans

Audit

Vulnerabilities

Assets

Schedules

Tokens

Webhooks

Organization

Members

Invitations

Analytics

LLM

Connectors

Chat

PR Reviews

Knowledge

Integrations

Uploads

Test Users

License

Supply Chain

CLI

Billing

Workspaces

Get license status

Authorizations

Response