Public roadmap

What's shipping, what's next

Honest plan, not promises. Updated whenever the order shifts, including the "considered but not committed" stuff at the bottom.

Status legend

Shipped In progress Planned Considered

Shipping now

Live and live-updated

What's already in production today.

  • TypeScript SDK

    Shipped

    @paperkeyhq/sdk on npm. Validate, activate, deactivate. MIT-licensed and audit-friendly.

  • MCP server for Claude / Cursor

    Shipped

    Drop @paperkeyhq/mcp into your AI client and drive Paperkey from natural language. Stdio transport, dashboard JWT auth.

  • HMAC-signed webhooks

    Shipped

    Six events for license + activation lifecycle. SHA-256 signing, 5-second timeout, auto-pause after 10 consecutive failures.

  • llms-full.txt for AI agents

    Shipped

    Auto-generated integration spec the LLM reads to wire Paperkey end-to-end. Cursor, Claude Desktop, n8n flows pick it up automatically.

  • Activation fingerprinting + 72 h offline grace

    Shipped

    Bind a license to a device fingerprint. Since SDK v0.3, validate() caches the last positive verdict on disk and replays it for up to 72 hours when the API is unreachable, so your customers stay running through any Paperkey outage.

  • Public launch

    In progress

    Hardening preprod, polishing content, smoke-testing the deploy. Targeting 2026 Q2.

Up next

Next 2-3 months

Committed and scoped. Being built or about to start.

  • Python SDK on PyPI

    Planned

    First-class port for Python. Same surface and fingerprint helper as the TS SDK.

  • PHP SDK on Packagist

    Planned

    Composer install for the WordPress / Laravel crowd. Same shape as TS, same examples.

  • Stripe billing integration

    Planned

    Connect a Stripe Customer to a Paperkey account for paid tiers. Auto-suspend on dunning, auto-restore on resub.

  • Team accounts

    Planned

    Multi-user dashboard with roles (owner / admin / viewer). Audit log gets a per-user actor field.

  • Audit-log retention extension

    Planned

    Pro and Business tiers can extend the 90-day default to 1 year for compliance.

Later

6+ months

Direction is clear, scope is loose. Order can shift on real demand.

  • n8n, Make, and Zapier templates

    Planned

    One-click flows for "issue license on Stripe payment", "revoke on refund", "send onboarding email on activation".

  • Custom email branding

    Planned

    Bring your own SMTP and From address for the license-issued email. For when "from @paperkey.dev" is not on-brand for your customers.

  • On-prem deployment guide

    Planned

    Detailed Docker + Caddy + Postgres recipe so security-conscious teams can self-host. The runbook already runs the production VPS. We will formalize it.

  • Multi-product license groups

    Planned

    A single key unlocks several products. Useful for bundles or upgrades from a base SKU to an add-on.

Considered

On the table

Worth doing if real demand shows up. Not committed yet.

  • Go SDK

    Considered

    For CLI tools and Go-based plugins. Would land if there is community pull.

  • GraphQL endpoint

    Considered

    The REST API covers 95 % of cases. GraphQL would only land if a real customer use case shows up.

  • SAML SSO

    Considered

    For enterprise sales. Would arrive with a Pro+ tier and per-seat pricing tweak.

  • Self-host helper script

    Considered

    A `pnpm dlx paperkey-selfhost` that scaffolds the docker-compose stack on a fresh VPS. Useful but not yet asked for.

Nudge something up?

Honest demand signal moves things up the list. Open a discussion on GitHub or send a one-liner. Both get read.

Still evaluating?

Read the 5-minute quickstart. Or skip it: the SDK has decent defaults and the dashboard explains itself.