Sentio License Manager

Sentio License Manager turns your WooCommerce store into a software licensing server. Sell licenses for your plugins, themes, or apps and let customers activate their purchase by signing in with their store account — no license keys to email, copy, or paste, and no separate dashboard to learn. When a customer completes an order for a licensed product, Sentio License Manager issues a license automatically and ties it to their account. The customer installs your software, opens its license screen, signs in with their store email and password, and activation happens in one step — on every site they own, up to the plan's seat limit. Login-Based Activation — No Keys Required Instead of emailing keys and fielding "it says invalid" support tickets, Sentio License Manager authenticates against your store credentials. Customers never see or handle a license key. A Full REST API for Your Client Plugins Sentio License Manager exposes a Bearer-token REST API that your distributed plugin or theme talks to: authenticate, activate a site, verify a license, and deactivate a seat. The built-in Integration Guide documents every endpoint with copy-pasteable code, and a complete working example client is available in the hosted developer documentation — copy one file, set four constants, and your software is license-aware. Migrate From LMFWC or Digital License Manager Already using License Manager for WooCommerce (LMFWC) or Digital License Manager (DLM)? Sentio License Manager imports your existing licenses with a guided, dry-run-first migration tool. It also ships REST API compatibility shims that return LMFWC- and DLM-shaped responses, so the client integrations you have already deployed keep working without code changes while you transition. Key Features

• Login-based activation — customers activate with their store account, never a key
• Automatic license generation when a WooCommerce order completes
• Per-domain activation management with configurable seat limits per plan
• Single-site, multi-site, and unlimited activation tiers
• Full REST API with Bearer-token authentication for client plugins
• Built-in Integration Guide with copy-pasteable code, linked to full hosted developer documentation
• One-click migration from License Manager for WooCommerce (LMFWC) and Digital License Manager (DLM)
• REST API compatibility shims so existing LMFWC/DLM client integrations keep working
• Optional, consent-gated anonymous usage telemetry (off unless you opt in)
• HPOS (High-Performance Order Storage) compatible

How It Works

1. Install Sentio License Manager on your WooCommerce store, create a product, and link it to a license plan from the Products screen — a couple of minutes with the built-in panel.
2. A customer purchases through your store and receives an order confirmation automatically.
3. The customer installs your plugin or theme, opens its license screen, and signs in with their store credentials — the license activates immediately, no key required.

Requirements

• WordPress 6.2 or higher
• WooCommerce 9.0 or higher
• PHP 8.0 or higher

1.8.5 - 2026-07-28

• The anonymous-usage telemetry checkbox on the welcome screen now renders unchecked. Telemetry is strictly opt-in: nothing is transmitted, no email is stored, and no scheduled task is created unless you tick the box and save.
• Global identifier prefix lengthened from slm to sentiolm to prevent conflicts with other plugins, per the directory guidelines. This covers option and user-meta keys, transients, scheduled-task hooks, action and filter names, form and AJAX action names, nonce actions, script and style handles, admin page slugs, and plugin constants. Existing installs carry their schema-tracking data forward automatically; other stored settings reset to defaults on upgrade.

1.8.4 - 2026-07-24

• The bundled example-integration reference code has been removed from the package in favor of hosted developer documentation (linked from the Integration Guide and overridable via the sentiolm_example_integration_url filter). The guide's inline code snippets are unchanged.
• The licenses-table per-page preference is now persisted only on a nonce-verified filter-form submit by a user with manage_options — plain pagination links can no longer write the stored preference.
• Every admin action handler (admin-post forms, AJAX endpoints, WooCommerce save hooks) now carries an explicit inline capability check followed by its nonce verification as the first statements of the handler, replacing the shared verification helper so the checks are visible at every read site.

1.8.3 - 2026-07-20

• All admin inline <script>/<style> blocks moved into enqueued asset files (Integration Guide, Settings, Products, and the WooCommerce product panel/variation fields), loaded only on their owning screens via admin_enqueue_scripts.
• Input-sanitization hardening: the licenses-table pagination now builds its links from an allowlisted, pre-sanitized parameter set instead of the raw request; API credential secrets from HTTP Basic Auth are sanitized at every intake point.
• Output-escaping hardening: white-label values interpolated into inline CSS are now type-sanitized (hex colors, font allowlist, tag-stripped custom CSS), and the My Account endpoint title filter escapes the substituted label.
• REST security: the LMFWC/DLM compatibility shims now require a consumer key with write permission for license activation and deactivation (matching create/update/delete); telemetry opt-out deletion now requires a per-site deletion token (returned on each ping, stored server-side only as a hash) so third parties cannot delete another site's telemetry row.
• Example-integration reference code renamed to a unique sentiolm_example_ prefix throughout.
• Admin screens now derive the REST base URL via rest_url(); fixed an unclosed output buffer in the license-update handler.
• Exhaustive follow-up audit across every shipped file: remaining inline onclick handlers replaced by a shared enqueued confirm helper, a declared sanitize_callback added to every REST route argument, and uniform unslash-plus-sanitize applied to every remaining request-variable read.

1.8.2 - 2026-06-18

• First WordPress.org release, revised for the directory. Self-hosted plugin/theme update-delivery — which served downloadable packages and fed WordPress native update checks for externally hosted plugins — has been completely removed: the public REST update endpoint, the "Plugin Releases" admin screen, the release-metadata database table, and all supporting code are deleted. This addresses the storefront/update-delivery classification; the plugin no longer installs, updates, or distributes any code from outside WordPress.org.
• Sentio License Manager is now strictly a license-management plugin: it issues and validates license keys for WooCommerce products and tracks per-site activations via a REST API — the same scope as other licensing plugins in the directory (License Manager for WooCommerce, Digital License Manager). It does not deliver software updates.
• Unchanged: license issuance on WooCommerce purchase, per-site activation management, the license-validation REST API (activate/validate/deactivate), LMFWC and DLM migration tools, the REST API compatibility shim, and consent-gated anonymous telemetry.