QuantumLockClient
A thin, synchronous client over the REST API. Auth is theX-API-Key header, set for you.
LicenseValidator (v1, deprecated)
Validates a v1 license file locally (expiry + signature integrity), with optional online cross-check. Emits aDeprecationWarning — use LicenseValidatorV2 for new integrations.
LicenseValidatorV2
Enterprise validation of v2 license artifacts. Checks run in a fixed order: signatures (RSA-PSS + optional ML-DSA hybrid), timestamps (nbf/exp/grace), device binding, revocation, and the anti-rollback epoch. ML-DSA verification requires the [pqc] extra; require_pqc=True makes a missing or failing PQC signature fatal.
HybridLicenseValidator
Offline-first: your product starts immediately on the local check, while revocation syncs online in the background through the unauthenticated hybrid endpoint (no API key ships with your app). Configuration comes from constructor arguments orQUANTUMLOCK_* environment variables.
HybridConfig.from_env():
There is no TypeScript SDK. Non-Python integrations should call the REST API directly.