Boundaries
- Free local package:
@runstamp/sdk(npm i @runstamp/sdk) is Apache-2.0 and includes the PPTX, PDF, DOCX and XLSX engines with every shipped local rendering capability. The engines are not published on npm as separate packages. The local MCP server is free to use locally, unmetered, with no signup. Check the installed package metadata for its distribution license. - Pro: company-wide production support for local deployments.
- Managed API: the free trial, then Platform and Enterprise plans. Pro does not include it. Runstamp operates document processing and workflow controls for you.
- Enterprise/OEM: negotiated embedding, deployment architecture, security review, and service terms.
Credentials
- Hosted API key: a
pj_live_…key for a free-trial workspace or an active Platform or Enterprise workspace, bound to an environment and explicit scopes. Send it only to hosted V2. - Enterprise/OEM offline certificate: an Ed25519-signed credential for a negotiated offline deployment. The Apache-2.0 engines don't need it, and it is not a Pro feature gate.
- Never pass a hosted API key to a local engine or expose either credential in browser code.
DOCX, PDF and XLSX take the same licenseKey render option. It overrides RUNSTAMP_LICENSE_KEY, even when both are set.
await renderToDocx(doc, { licenseKey });
await PdfEngine.render(doc, { licenseKey });
await SpreadsheetEngine.render(doc, { licenseKey });Plans
| Plan | Role | Includes |
|---|---|---|
| Free | Local use | All stable generally available operations through Apache-2.0 local packages, SDK, CLI and MCP, plus the demo, with no signup |
| Pro | Local production | $199/month or $1,990/year; two support contacts, bounded version support, one annual readiness review, an initial response target of one business day for reproducible production blockers (support hours Monday to Friday, 09:00-17:00 America/New_York); no hosted entitlement or resolution SLA |
| Platform | Managed processing | $1,500/month or $15,000/year; 50,000 successful output files/month, no rollover, $0.03 per extra successful output file only if you authorize it, workflow controls, governed hosted delivery |
| Enterprise | Custom requirements | From $50,000/year. The order sets volume, overage or cap, OEM rights, deployment, security, support, retention and service terms |
Hosted usage definition
One successful output file is one output artifact committed by a terminally successful top-level execution, the same count the pricing page calls a successful output file. A run that returns several files, and a render pack, count once per file they commit. Retries, preflight blocks, failed or canceled attempts, status reads, downloads, review decisions and internal verification do not add output files. An artifact that renders still counts if a person later rejects it.
Platform overage is opt-in. An organization can choose a hard cap instead. Self-serve Platform stops at 250,000 output files/month (the highest hard cap or overage cap the console accepts); more volume needs a contracted Enterprise allowance. Retention, concurrency, support hours, service credits and private deployment are set in the release or order form, not promised by tier.
Offline Enterprise/OEM validation
Enterprise customers can instead get a long-lived offline certificate:
pjsx_offline_v1_<base64url(UTF-8 JSON entitlement)>.<base64url(Ed25519 signature)>
The signature covers the ASCII bytes of pjsx_offline_v1_<payload>. The
payload holds the organization, Enterprise tier, allowed formats and features,
deployment scope, issue time and expiry. Existing issued licenses remain
compatible. New issuance is an Enterprise/OEM service and does not gate the
Apache-2.0 engine packages.
Get the public key from https://runstamp.com/.well-known/runstamp-license-public-key.pem before moving to an air-gapped environment. Pin the reviewed key; don't fetch it at runtime.
Revoking, upgrading, canceling
- Revoke online API keys: Setup → API keys in the console, open the key's menu and choose Revoke key. Revoking cannot be undone; the key moves to the Revoked list.
- Replace an offline certificate: contact Runstamp. An air-gapped runtime cannot get online revocation, so the controls are expiry, certificate replacement, key rotation and updated SDK deny-list material.
- Change a subscription: use the billing portal. Upgrade to Platform self-serve, monthly or annual.
- Cancel: stops future renewal. For a self-serve Platform or Pro subscription, cancellation normally takes effect at the end of the paid period and does not refund that period. Until then the hosted API keeps working; after it, the workspace returns to Free, the hosted entitlement and API keys end, and any Pro license key is revoked. It does not disable the Apache-2.0 engines. Cancelling does not delete data: hosted artifacts and usage records follow the retention schedule in the Terms, and deleting the account is a separate request.