1. Get an API key

QuantumLock authenticates with SoftQuantus Platform API keys.
1

Create a key

Sign in at platform.softquantus.com and create an API key.
2

Grant scopes

Give the key the quantumlock:use scope (required for every QuantumLock call). Add quantumlock:read for listing/reading, quantumlock:keys for key lifecycle and revocation, and quantumlock:sign for KMS and artifact signing.
3

Store it safely

Keep the key in an environment variable or secret manager — never in source code.
Every authenticated request sends the key in the x-api-key header — not Authorization: Bearer. A request without it is answered 401 with a WWW-Authenticate challenge; a key missing the required scope is answered 403.

2. Install the client

This installs the Python SDK and the quantumlock / ql CLI. See Installation for extras and what the package contains.

3. First call: confirm your identity

4. Issue your first license

The response includes the license_key, the features, valid_until, and provenance metadata about how the key material was produced.

5. Validate it

What’s next

License API in depth

v2 artifacts, hybrid validation, revocation, status proofs.

Activation & offline

Device binding, offline validation, grace periods.

Python SDK

The four SDK classes with examples.

Key management

KMS v2 signing and custody providers.

Evidence bundles

Sealed evidence and the transparency log.

Full API reference

All 84 operations with scopes.