SellRealm implements an enhanced security model with separate authentication secrets for each API, providing better isolation and security for your store operations.

Authentication Secrets

Finding Your Secrets

1. Log into your SellRealm dashboard
2. Navigate to Store Settings
3. Copy your 48-character auth_secret for License API
4. Copy your 48-character store_secret for Store API
5. Keep both secrets secure — never share them publicly

License API (v0) — Encrypted POST

POST https://sellrealm.com/api/v0/
Content-Type: application/x-www-form-urlencoded

auth_secret=your_48_char_auth_secret
[encrypted payload parameters]

Store API (v1) — Bearer Token

GET https://sellrealm.com/api/v1/products
Authorization: Bearer your_48_char_store_secret
Content-Type: application/json

SellRealm provides officially maintained SDKs that handle all complexity of encryption, session management, and secure communications.

SDK Features

• Automatic Encryption: All data encrypted and decrypted automatically
• Session Management: Handles login, validation, and logout automatically
• HWID Detection: Platform-specific hardware ID generation
• Error Handling: Comprehensive error handling with detailed messages
• Thread Safety: Safe for use in multi-threaded applications
• Retry Logic: Automatic retry on network failures

HTTP Status Codes

Common Error Messages

The License API provides comprehensive license key management for protecting your software applications. It handles license verification, user authentication, HWID binding, session management, variable storage, and audit logging. All communications use enterprise-grade encryption and require your auth_secret.

Base URL

https://sellrealm.com/api/v0/

Available Operations

Verifies a license key, authenticates the user, binds the key to hardware ID, and creates an authenticated session. This is the primary authentication method — equivalent to a user login. Returns license variables and user information upon successful authentication.

Core Parameters

Success Response

{
  "status": "success",
  "message": "Key is valid",
  "session_id": "a1b2c3d4e5f6...",
  "session_expires_at": "2024-12-25 12:00:00",
  "nonce": "random_nonce_value",
  "key_expires_at": "2024-12-31",
  "variables": {
    "app_version": "1.0.0",
    "feature_flag": true
  },
  "server_time": 1703512800,
  "level": 1
}

Error Response

{
  "status": "error",
  "message": "Invalid key or auth secret"
}

Validates an existing session without requiring full key verification. Use this for periodic checks to ensure the user's session is still valid and active.

Request Parameters

Success Response

{
  "status": "success",
  "message": "Session is active and key is valid",
  "nonce": "new_nonce_value",
  "key_expires_at": "2024-12-31",
  "level": 1,
  "server_time": 1703512800
}

License Variables provide a secure way to store sensitive information on SellRealm's servers instead of hardcoding values in your application. These variables are automatically returned during successful login/verification.

Variable Types

Example Variable Response

{
  "variables": {
    "api_endpoint": "https://api.example.com/v1",
    "premium_features": true,
    "max_users": "100",
    "secret_key": "sk_live_abc123def456"
  }
}

Common Use Cases

• API Keys: Store third-party API keys securely
• Feature Flags: Enable/disable features remotely
• Configuration: Server URLs, timeouts, limits
• Licensing Tiers: Different features per license level
• Updates: Minimum version requirements, update URLs

Hardware ID (HWID) management allows you to bind license keys to specific devices, preventing unauthorized sharing while providing flexibility for legitimate use cases.

Retrieve the currently stored HWID for a license key.

{
  "status": "success",
  "message": "HWID retrieved",
  "hwid": "ABC123-DEF456-GHI789"
}

Clear the HWID binding for a license key, allowing it to be used on a different device.

{
  "status": "success",
  "message": "HWID reset successfully"
}

Terminate an active session, logging the user out and requiring re-authentication.

{
  "status": "success",
  "message": "Session terminated"
}

Log custom actions for audit trails and monitoring. Track specific user activities, security events, or application usage for compliance and analytics purposes.

Example Use Cases

• Security Events: Failed login attempts, permission changes
• Feature Usage: Premium feature access, API calls
• Compliance: Data access, export operations
• Analytics: User behavior, performance metrics

{
  "status": "success",
  "message": "Action logged successfully"
}

Permanently ban a license key and terminate all associated sessions. This is an irreversible security action used to prevent further access by compromised or misused keys.

Common Ban Reasons

• Security Breach: Key compromised or unauthorized access detected
• Terms Violation: User violated license terms or usage policy
• Fraud: Fraudulent purchase or chargeback
• Abuse: Excessive API usage or system abuse

{
  "status": "success",
  "message": "Key has been banned successfully"
}

The Store API provides access to your store's data including products, orders, customers, and analytics. This API uses your store_secret for authentication and is currently in development with basic functionality available.

Base URL

https://sellrealm.com/api/v1/

Authentication

All Store API requests require your store_secret in the Authorization header:

Authorization: Bearer your_48_char_store_secret

Retrieve a list of all products in your store.

Authorization: Bearer your_48_char_store_secret

[
  {
    "product_id": 1,
    "title": "Sample Product",
    "price": 25.00,
    "stock": null,
    "created_at": "2024-05-16 05:24:48"
  }
]

Create a new product in your store.

Authorization: Bearer your_48_char_store_secret
Content-Type: application/json

Request Body

{
  "title": "New Product",
  "price": 19.99,
  "stock": 100
}

{
  "message": "Product created successfully",
  "product_id": 4
}

• Retrieve order history
• Get order details by ID
• Update order status
• Process refunds
• Track order analytics

Retrieve a list of license keys in your store.

Authorization: Bearer your_48_char_store_secret

[
  {
    "key_id": 1,
    "key_value": "6CE3-5E57-45C7-7B12",
    "status": "Used",
    "created_at": "2024-05-17 08:39:47"
  }
]