QCOS uses bearer API keys for API, SDK, CLI and MCP access. QuantumLock license keys are separate and control commercial entitlements.

Create an API key

1

Open the portal

Go to platform.softquantus.com and sign in to your organization.
2

Create a key

Open Settings > API Keys, choose a name, and assign the minimum scopes required.
3

Store it securely

Copy the key once and store it in a secret manager or local environment variable.

Use the key

Operational rules

  • Use different keys for development, staging and production.
  • Do not commit .env files or API keys.
  • Rotate keys before team changes and after incidents.
  • Use secret managers for CI/CD.
  • Keep QuantumLock license keys separate from QCOS API keys.