Features How It Works Pricing FAQ Go to App →
Built for RPG Maker MZ Plugin Developers

Guard Your
Plugins.
Protect Your Revenue.

License management, HWID device binding, and RSA validation for RPG Maker MZ plugin creators. Everything managed from a single dashboard.

Go to App → See how it works
sample license key
PC-A3F9 · 7B2E · C401 · 9D8F
VALID
RSAEncrypted Licenses
HWIDDevice Binding
APIReal-time
MZNative Support

Why Plugin Developers Lose Revenue

Your hard-built plugins get copied and shared freely. Without license protection, your revenue is wide open.

Paid plugins get pirated

Users share your paid plugin files without any purchase — and you never know.

👁

Zero usage visibility

Which project uses which license? You have zero visibility into your own distribution.

📋

Manual tracking is painful

Spreadsheets, emails, manual checks — you spend dev time on administration instead of building.

🔮

No distribution control

Want to revoke or expire a license? There's no infrastructure to do it cleanly.

PluginCastle Handles Everything

01
HWID Device Binding
Licenses are cryptographically bound to the player's hardware. A unique fingerprint via NW.js prevents use on unauthorized machines.
02
RSA-Signed JWT Licenses
Every license is a JWT signed with your RSA private key. Verification works offline — no server round-trip required.
03
Developer Dashboard
Manage your plugins, customers, and licenses from one place. Track plan limits and active usage in real time.
04
REST API Integration
Hybrid validation: server-side API checks and local JWT verification. Integrate with your plugin via our lightweight JS SDK.
hwid_validation.js
// HWID generation via NW.js
const hwid = await PluginCastle
  .generateHWID();

// Validate license against hardware
const result = await PluginCastle
  .validateLicense({
    licenseKey: userKey,
    hwid: hwid,
    pluginId: "MY_PLUGIN_ID"
  });

if (result.valid) {
  console.log("✓ License valid");
  // Enable plugin features
} else {
  console.warn("✗ Unauthorized");
}

Four Steps to Protection

Setup takes under 30 minutes. After that, PluginCastle runs silently in the background.

01

Create Account & Add Plugin

Register on PluginCastle, define your first plugin, and receive your API credentials.

02

Integrate the JS SDK

Drop the lightweight SDK into your RPG Maker MZ plugin. HWID collection and JWT validation included.

03

Create & Send Licenses

Create customers in the dashboard, generate a license, and send it via email. All in one click.

04

Monitor & Manage

See who's running your plugin on which device. Revoke any license instantly whenever you need to.

Simple, Transparent Pricing

No hidden fees. Upgrade as your business grows.

Starter
$7/mo
$5/mo billed annually
  • 1 Plugin
  • 100 Customers
  • HWID Device Binding
  • RSA JWT Validation
  • REST API Access
  • Priority Support
  • Advanced Analytics
Coming Soon

payment system not yet active

Pro
$25/mo
$20/mo billed annually
  • 5 Plugins
  • 1,000 Customers
  • HWID Device Binding
  • RSA JWT Validation
  • REST API Access
  • Priority Support
  • Advanced Analytics
Coming Soon

payment system not yet active

Common Questions

No. HWID collection runs entirely in the background — players notice nothing. The check only triggers at launch and adds zero perceptible delay on authorized devices.
Yes. RSA-signed JWT licenses can be verified locally without an internet connection. Server-side validation is optional and adds an extra layer when connectivity is available.
Our current focus is RPG Maker MZ. Since the HWID mechanism runs on NW.js, it has potential compatibility with MV and other NW.js-based engines as well.
One click from the dashboard. Revoked licenses are invalidated immediately — the customer is rejected on their next validation attempt.
We're actively working on payment integration. In the meantime, you can explore the platform and contact us to learn about early access.

Build a Castle Around Your Plugins

Explore the platform, see how it works. Payment system coming soon.

Go to App → Get in Touch