{
  "mcpServers": {
    "qnsp": {
      "command": "npx",
      "args": ["-y", "@cuilabs/qnsp-mcp"],
      "env": {
        "QNSP_API_KEY": "qnsp_live_..."
      }
    }
  }
}

import { QnspMcpClient } from "@cuilabs/qnsp-mcp";

const mcp = new QnspMcpClient({ apiKey: process.env.QNSP_API_KEY! });

// Every tool call is ML-DSA-signed and audited by QNSP
const tools = await mcp.listTools();
// → [{ name: "qnsp_vault_get", ... }, { name: "qnsp_kms_sign", ... }]

const result = await mcp.callTool("qnsp_vault_get", {
  secretId: "openai-key",
});
// Agent receives a signed envelope; never raw plaintext