1. Get an API key
QuantumLock authenticates with SoftQuantus Platform API keys.1
Create a key
Sign in at platform.softquantus.com and create an API key.
2
Grant scopes
Give the key the
quantumlock:use scope (required for every QuantumLock call). Add quantumlock:read for listing/reading, quantumlock:keys for key lifecycle and revocation, and quantumlock:sign for KMS and artifact signing.3
Store it safely
Keep the key in an environment variable or secret manager — never in source code.
Every authenticated request sends the key in the
x-api-key header — not Authorization: Bearer. A request without it is answered 401 with a WWW-Authenticate challenge; a key missing the required scope is answered 403.2. Install the client
quantumlock / ql CLI. See Installation for extras and what the package contains.
3. First call: confirm your identity
4. Issue your first license
license_key, the features, valid_until, and provenance metadata about how the key material was produced.
5. Validate it
What’s next
License API in depth
v2 artifacts, hybrid validation, revocation, status proofs.
Activation & offline
Device binding, offline validation, grace periods.
Python SDK
The four SDK classes with examples.
Key management
KMS v2 signing and custody providers.
Evidence bundles
Sealed evidence and the transparency log.
Full API reference
All 84 operations with scopes.