Licensing & Activation
Static analysis never needs a license. A license key unlocks AI analysis, the dashboard, and team features — activate it with a single environment variable.
What a license unlocks
Anonymous (no account)
Full static analysis — every rule, every output format, unlimited scans. No license key, no sign-up.
No AI analysis.
Free account
Everything anonymous has, plus a license key and 500 AI credits per month.
AI analysis with Amazon Nova Lite (0.5 credits per resource).
Pro
Dashboard, analytics, scan history (90-day retention), PDF reports, GitHub Action.
5,000 AI credits per month across all 4 Bedrock models.
Team
Everything in Pro plus team management, shared licenses, and team analytics (365-day scan retention).
10,000 AI credits per seat per month. 2-seat minimum.
Full pricing and credit maths live on the pricing page. When credits run out, AI analysis pauses until your next billing cycle — static scans keep working and nothing extra is charged.
Get a license key
Sign up (free) at cdkinsights.dev/start or subscribe on the pricing page. Your key appears in the dashboard under Licenses and looks like:
LIC-XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXActivate it
The CLI reads CDK_INSIGHTS_LICENSE_KEY from the environment. Locally, put it in your project's .env (and gitignore it):
# .env — never commit this file
CDK_INSIGHTS_LICENSE_KEY=LIC-XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXIn CI, store it as a secret and export it for the scan step:
# GitHub Actions
- name: CDK Insights scan
run: npx cdk-insights scan -y
env:
CDK_INSIGHTS_LICENSE_KEY: ${{ secrets.CDK_INSIGHTS_LICENSE_KEY }}On the next run the CLI authenticates, prints your tier (e.g. CDK Insights (pro tier)), and enables the features your plan includes. Auth tokens are cached locally for about an hour, so most runs skip the network round-trip.
“License validation failed”?
- Check the key is set in the environment the scan actually runs in:
echo $CDK_INSIGHTS_LICENSE_KEY. - Make sure you're on the latest CLI:
npx cdk-insights@latest scan. - Corporate proxies must allow HTTPS to
api.cdkinsights.dev. - The run never breaks: on any validation failure the CLI falls back to free static-only analysis and says so in the terminal.
Next: pick your AI model
With a license active, choose the Bedrock model that fits your budget — from Nova Lite at 0.5 credits per resource to Sonnet 4.6 at 16.
Read the AI Models docs