I want a public API key (separate from the secret x-api-key) that can be safely embedded in client-side Java applications to activate and validate licenses without requiring a backend server.
This is important because I want to keep my project low-code/no-code without setting up backend servers or serverless functions. Currently, the x-api-key must be kept secret, which forces me to build a server-side proxy just for license operations.
A public API key would:
- Allow safe embedding in client applications (desktop Java apps, mobile apps, etc.)
- Only have permission to activate and validate licenses (read-only operations)
- Not expose sensitive account data or payment information
- Enable developers to build simple applications without backend infrastructure
This would make Creem's licensing system much more accessible for indie developers and small projects that don't need complex server architectures.