QNSP

Developer platform

Build quantum-secure infrastructure in minutes

GAAlways Free SDKs

First-party SDKs in TypeScript, Python, Go, Rust, and JVM/Android + REST APIs (OpenAPI). Free on every plan. Zero ops overhead. Production-ready from day one.

5SDK languages
1Package per language
11Service modules
FreeSDK access
OpenAPIFull spec
Start building freeRead documentation

Quick start

From zero to quantum-secure in 4 steps

1

Sign up free

Create your account at cloud.qnsp.cuilabs.io and provision your tenant in minutes

2

Install SDK

SDK install and usage instructions are provided in the documentation portal

3

Upload your first document

Use QNSP APIs to upload documents with quantum-secure encryption

4

Build your app

Integrate QNSP into your application with full PQC protection

Most Requested Tier — Dev Team

$1,499/month — designed by the community. CBOM export, quantum readiness reports, 90-day audit retention included from day one.

CBOM export included
Quantum readiness report
90-day audit retention
1M API calls/month
1 TB PQC-encrypted storage
200 KMS keys · 350K ops/month
3 portal seats · 35 API keys
7% annual discount

Request lifecycle

How a QNSP API call flows.

What happens between an SDK call and a tamper-evident audit-ledger entry. The dashed cross-verification branch on signing operations (liboqs + @noble/post-quantum, with provider attestation written into the Merkle ledger) is the architectural choice that sets QNSP apart from single-provider PQC platforms.

QNSP request lifecycle and cross-verification branchDiagram: a client SDK request enters the QNSP edge gateway, fans out to platform services, and on signing operations splits into a parallel liboqs and noble verification path that records provider attestation into the Merkle audit ledger.Your application codeTypeScript · Python · Go · Rust · JVM/Android · pnpm add @cuilabs/qnsp · pip install qnsp · go get … · cargo add qnspJWT + ML-KEM-768 TLSQNSP Edge GatewayTenant isolation · crypto-policy enforcement · entitlement gating · rate limitsKMS Service · signingML-DSA-65/87 · SLH-DSA · FN-DSA · Falconkey escrow · Shamir M-of-N · BYOHVault · Storage · Search · AISSE-X encrypted at rest · enclave AIPDP · access control · quota · entitlementsCross-verification (Maximum + Government tiers)liboqsnative C · 86 algos@noble/post-quantumpure JS · 18 FIPS algosProviderAttestationAudit LedgerMerkle-tree checkpoints · ML-DSA-signed roots · 90d → 7yr retention

Cross-verification logic and audit-chain checkpoint generation are both independently reproducible from the public mirror at github.com/cuilabs/qnsp-public.

Migration build path

How engineering teams move workloads onto QNSP

Most teams start with APIs and SDKs, but the broader migration path is the same: connect sources, discover what exists, then cut workloads over so production trust calls QNSP directly.

Connect sources

Use provider connectors for AWS, Azure, GCP, Vault, and supported APIs. Use QNSP agents where discovery must happen inside private environments.

Discover and inventory

Run discovery before refactoring application code so the migration plan is based on actual keys, secrets, certificates, and cryptographic dependencies.

Switch application trust paths

Update services, CI jobs, agents, and apps to call QNSP KMS, Vault, storage, search, audit, and policy-managed interfaces through SDKs, APIs, and the CLI.

Validate evidence

Use readiness reports plus CBOM, QBOM, and SBOM outputs to verify cutover and prove that production no longer depends on legacy trust systems.

Read migration docsOpen crypto posture

SDK packages

SDKs in TypeScript, Python, Go, Rust, JVM/Android — free on every plan

One package per language, all sharing the same wire contracts: TypeScript (pnpm add @cuilabs/qnsp), Python (pip install qnsp), Go (go get github.com/cuilabs/qnsp-public/sdks/go/qnsp@latest), Rust (cargo add qnsp), JVM/Android (implementation('io.cuilabs:qnsp:0.1.0')).

@cuilabs/qnsp (npm — TypeScript / Node.js)Available

Single Node.js / TypeScript package covering all 11 QNSP services (vault, kms, audit, auth, tenant, access, billing, crypto-inventory, storage, search, ai) + webhook verification + activation. Replaces the 11 deprecated per-service @cuilabs/qnsp-*-sdk packages.

qnsp (PyPI — Python)Available

Single Python package mirroring the same 11-module surface, plus local PQC primitives (qnsp[crypto] extra → liboqs-python) and webhook verify. Async variant on the v0.4.0 roadmap.

github.com/cuilabs/qnsp-public/sdks/go/qnsp (Go)Available

Single Go module with the 11-service surface as sub-packages (qnsp/vault, qnsp/kms, …) + qnsp/crypto via liboqs-go. Concurrency-safe, sync.Mutex'd activation cache, share one *qnsp.Client across goroutines.

qnsp (crates.io — Rust)Available

Tokio-based Rust crate with all 11 services as modules (qnsp::vault, qnsp::kms, …) + qnsp::crypto behind the `crypto` feature flag (oqs 0.11). Client is Send + Sync, cheap to clone via internal Arc.

io.cuilabs:qnsp (Maven Central — JVM / Android)Available

Kotlin SDK with a Java-interop-clean API; all 11 services as sub-clients (qnsp.kms, qnsp.vault, …) + webhook verification. Built on OkHttp — one artifact for Spring/JVM backends and native Android (API 21+). On-device PQC via Bouncy Castle or OS-native.

@cuilabs/qnsp-browser (npm)Available

Browser-side PQC primitives bundled with @noble/post-quantum for client-side encryption / signing / key encapsulation. Use this in the browser; use @cuilabs/qnsp on Node.js.

@cuilabs/qnsp-cli (npm)Available

qnsp CLI for scripting, CI/CD, and operational tasks. Wraps the same APIs as @cuilabs/qnsp.

@cuilabs/qnsp-mcp (npm)Available

Model Context Protocol server exposing QNSP tools to AI assistants (ChatGPT, Claude Desktop, Cursor, Windsurf).

@cuilabs/qnsp-agent (npm)Available

Host agent for crypto asset discovery and continuous monitoring.

SDK access and full API reference: docs.qnsp.cuilabs.io · npmjs.com/package/@cuilabs/qnsp

API reference

REST API — Edge Gateway

All services accessible via a single edge gateway. Full OpenAPI specifications available in the documentation portal.

Base URLhttps://api.qnsp.cuilabs.io
Auth/auth/v1
Tenant/tenant/v1
Billing/billing/v1
Storage/storage/v1
Vault/vault/v1
KMS/kms/v1
Search/search/v1
AI Orchestrator/ai/v1
Platform API/platform/v1

CI/CD Integration

GitHub Actions

Workflow templates for SDK usage, API key injection, and PQC audit webhooks.

GitLab CI

Pipeline examples for vault secrets injection and PQC-signed artifact verification.

Jenkins

Shared library examples for QNSP SDK integration and compliance report generation.

CircleCI

Orb examples covering auth, storage upload, and audit log retrieval.

FAQ

Developer FAQ

Direct answers to the questions developers ask before building on QNSP.

What SDKs does QNSP offer?

QNSP ships first-party SDKs for five languages, one package per language, all sharing the same wire contracts across 11 services: TypeScript/Node (@cuilabs/qnsp on npm), Python (qnsp on PyPI), Go (github.com/cuilabs/qnsp-public/sdks/go/qnsp), Rust (qnsp on crates.io), and JVM/Android (io.cuilabs:qnsp on Maven Central). All are free on every plan.

Is there a free QNSP tier?

Yes. QNSP has a free-forever tier for everyone, with no credit card required. It includes 10 GB of PQC-encrypted storage, 50,000 API calls per month, 20 KMS keys, 25 vault secrets, PQC TLS, and full SDK access. It is intended for evaluation and small projects; paid tiers add vault, SSE-X, and higher quotas.

Resources

Documentation, packages, and tools