Lock a Whop license to one machine. Generates a stable hardware fingerprint (no MAC address — fragile and spoofable) and validates it against Whop’s real license API.

What you get:

• generate_hwid() — deterministic fingerprint using /etc/machine-id (Linux), IOPlatformUUID (macOS), or MachineGuid (Windows). Fails loudly instead of falling back to a weak fingerprint.
• WhopLicenseClient — wraps POST /api/v2/memberships/{id}/validate_license correctly, including the metadata binding behavior most people get wrong.
• 4/4 tests included, run against a mocked Whop server; fingerprint generation also tested live on Linux.

Built for developers selling their own tools on Whop who are tired of license keys anyone can share on a Discord.

Data Quality Disclosure: the exact HTTP status Whop returns for a metadata mismatch isn’t documented. This library treats anything other than 201 as invalid — correct either way, but verify against your own account before branching on a specific failure code.

Python. Delivered as ZIP, no dependencies beyond requests.