Tiers — WP Luminary
WP Luminary has three tiers. All tiers include the same scanning engine; tiers differ in how the AI analysis is performed and how many seats (domain activations) are included.
Comparison
Section titled “Comparison”| Feature | Bronze | Silver | Gold |
|---|---|---|---|
| Scan types | File + database options | File + database options | File + database options |
| AI analysis | Direct to Anthropic (your API key) | LittleBig proxy (key managed) | LittleBig proxy (key managed) |
| Model choice | Yes (your account, your cost) | No — proxy selects the model | No — proxy selects the model |
| Prompt ownership | License server (delivered at validation, not in plugin source) | License server | License server |
| Credits | Deducted from your Anthropic account | LittleBig credit balance | Unlimited |
| Threat telemetry | None | Anonymized aggregation | Anonymized aggregation |
| Dynamic scan config | Yes (prompt updated server-side without plugin release) | Yes | Yes |
| Seat limit | 1 domain | 3 domains | 10 domains |
Credits (Silver tier)
Section titled “Credits (Silver tier)”Silver accounts start with 50 scan credits. Each /v1/analyse call costs 1 credit. Since v1.4.8 the remaining balance is visible in two places: a credits stat card on the dashboard and the license status block on the settings page — both link to the top-up page (WPL_TOPUP_URL, currently a placeholder until the store product exists; the purchase webhook will call POST /v1/admin/credits/grant).
When credits are exhausted, the proxy returns 402 Payment Required and the plugin pauses the scan cleanly: unscanned files stay pending, the scan status becomes credits_exhausted, and a persistent admin notice with a top-up link appears. After a top-up, the notice auto-clears and the pending queue resumes on the next scheduled batch — no rescan needed.
Top-up recovery (v1.4.9): starting a scan after a credit wall forces a fresh license validation (bypassing the 12h status cache), so a top-up takes effect immediately; the first successful proxy response also clears the exhausted state. Note for testers: the proxy endpoint can be overridden via define('WPL_PROXY_URL', ...) in wp-config.php — a stale override pointing at a retired dev server causes every analysis call to fail regardless of credit balance.
Model selection is only available on Bronze (you pay your own Anthropic bill). On Silver/Gold the proxy enforces the model server-side, so the settings field is hidden.
Seat limits
Section titled “Seat limits”Each activation binds a license key to a domain. Local development domains (localhost, *.local, *.test, *.ddev.site, *.lndo.site) are detected automatically and do not count against your seat limit.