How it works
What happens when — every request the extension makes, and what the answer means.
Your extension ships with a small client. The platform answers it. Stripe holds the money, on your account.
| When | What happens |
|---|---|
| Install | The extension makes a key pair on the device and registers the public half. Every request after that is signed with the private one, which never leaves the browser. |
| Free use | The popup asks for a permit before each use. The platform counts on the server, per device, up to the free limit you set. |
| Buy | The popup opens /tools/<id>?ext=<extension id> on your workspace's address. Stripe Checkout runs on your account. The success page tells the extension; the licence or subscription lands on the buyer's account. |
| Sign in | The popup opens /connect. Signed in there, the page hands the extension a one-time token; the extension trades it for a narrow link that can prove entitlement and nothing else. |
| Every 15 minutes | The extension asks for a fresh token and gets one only while the licence or subscription is live. A refund, a cancellation or a revoke stops it at the next check. Offline, a token lasts a day. |
| Bad build | Set a minimum version under Versions and older builds refuse to run with your message. Nobody has to find the update themselves. |
Tokens, and why the extension trusts nothing else
Entitlement is a token signed with your workspace's own key, bound to one device, short-lived. The extension verifies it with the public key it shipped with — no request to the Wall is needed to check a token, only to get one. Rotate the key from the dashboard and installed extensions fetch the new public key by themselves; the old one keeps verifying for thirty days.
What the Wall keeps
For each tool: licences (as hashes of the key, with the prefix shown in the dashboard), activations (which device, since when), subscriptions (mirrored from Stripe's webhooks), trials and grants, the free-tier counters, and the extension links that turn a sign-in into a device that is trusted. For the workspace: your buyers, in a pool of their own.