# ClavisAUH

> Licensing and authentication for desktop software. License keys, device binding, end-user sign-in, signed releases, Protect 24/7 monitoring and a Seller API, on CLV1.1: the device signs every request and the application key signs every response, bound to the request's status, path and nonce.

## Docs
- [How the system works](https://clavisauh.id.vn/eng/docs/how-it-works): license, device and session life cycles, the calls of each scenario.
- [Downloads](https://clavisauh.id.vn/eng/docs/downloads): every SDK as one file to install, the C library and the clavis command line tool for Windows and Linux x64, with SHA-256 checksums.
- [Error codes](https://clavisauh.id.vn/eng/docs/errors): one table for every SDK, the C library and the CLI, with the sentence for the end user.
- [CLV1 protocol](https://clavisauh.id.vn/eng/docs/protocol): headers, signed strings, CLV1.1 verification contract, key rotation, endpoints, offline tokens, error codes.
- [Seller API](https://clavisauh.id.vn/eng/docs/seller-api): scoped bearer keys, idempotent writes, resellers, signed webhooks.
- [Security](https://clavisauh.id.vn/eng/security): Standard and Advanced Protection.
- [Documentation](https://clavisauh.id.vn/eng/docs): overview.
- [Pricing](https://clavisauh.id.vn/eng/pricing): Basic (free) and Premium limits.

## SDK
- Official SDKs: JavaScript/TypeScript (@clavisauh/sdk), Python, C#/.NET 8, C++17, Go, Rust, Java 17; the same calls in each language's style (init, activate, trial, register, login, redeem, heartbeat, variables, checkUpdates, logout, verifyOffline, has).
- Any language that can call C: the C library (clavis.dll, libclavis.so). Scripts and installers: the clavis command line tool, one JSON line per command.
- Not yet on npm, PyPI, NuGet, crates.io or Maven Central: install from the downloads page.
- Pass appPublicKeys: [{ kid, key }] (every trusted key, from the dashboard's Signing keys panel) or appPublicKey.
- Never embed secrets in client software: only the application public keys.