Official SDKs

import os
from quantaseal import QuantaSealClient

client = QuantaSealClient(api_key=os.getenv("QUANTASEAL_API_KEY"))

# Encrypt with ML-KEM-768 + AES-256-GCM
result = client.encryption.encrypt(
    data="sensitive PII",
    algorithm="ML-KEM-768",
)
print(result.ciphertext_kem)   # 1088 bytes base64

# Sign with ML-DSA-65 + HMAC-SHA-512
sig = client.encryption.sign(data="payload")
ok  = client.encryption.verify(
    data="payload",
    pqc_signature=sig.pqc_signature,
    hmac_signature=sig.hmac_signature,
)

# Vault - seal a credential
entry = client.vault.seal(
    name="stripe-key",
    credential_type="api_key",
    values={"key": "sk_live_..."},
)
credential = client.vault.unseal(entry.credential_id)

# Compliance report
report = client.compliance.report(framework="soc2")
print(report.score, report.pdf_url)

import { QuantaSealClient } from '@quantaseal/sdk';

const client = new QuantaSealClient({
  apiKey: process.env.QUANTASEAL_API_KEY!,
});

// Encrypt with ML-KEM-768 + AES-256-GCM
const encrypted = await client.encryption.encrypt({
  data: 'sensitive PII',
  algorithm: 'ML-KEM-768',
});

// Sign with ML-DSA-65 + HMAC-SHA-512
const sig = await client.encryption.sign({ data: 'payload' });
const valid = await client.encryption.verify({
  data: 'payload',
  pqcSignature: sig.pqcSignature,
  hmacSignature: sig.hmacSignature,
});

// Vault - seal a credential
const entry = await client.vault.seal({
  name: 'stripe-key',
  credentialType: 'api_key',
  values: { key: 'sk_live_...' },
});

// Compliance report
const report = await client.compliance.report({ framework: 'soc2' });
console.log(report.score, report.pdfUrl);

package main

import (
	"context"
	"fmt"
	"os"

	qsclient "github.com/quantaseal/sdk-go/client"
)

func main() {
	c := qsclient.New(os.Getenv("QUANTASEAL_API_KEY"))
	ctx := context.Background()

	// Encrypt with ML-KEM-768 + AES-256-GCM
	enc, err := c.Encryption.Encrypt(ctx, qsclient.EncryptRequest{
		Data:      "sensitive PII",
		Algorithm: "ML-KEM-768",
	})
	if err != nil {
		panic(err)
	}
	fmt.Println(enc.CiphertextKEM)

	// Vault - seal a credential
	entry, _ := c.Vault.Seal(ctx, qsclient.VaultSealRequest{
		Name:           "stripe-key",
		CredentialType: "api_key",
		Values:         map[string]string{"key": "sk_live_..."},
	})
	fmt.Println(entry.CredentialID)
}

# Configure
qs config set api-key qs_live_...

# Encrypt (ML-KEM-768 + AES-256-GCM)
qs encrypt --text "my secret data"

# Vault operations
qs vault list
qs vault seal --name "stripe-key" --type api_key
qs vault unseal cred_abc123
qs vault rotate cred_abc123

# Compliance (9 frameworks)
qs compliance report --framework soc2
qs compliance all

# Audit
qs audit logs --event-type CREDENTIAL_UNSEALED --hours 24
qs audit verify-chain

// Claude Desktop claude_desktop_config.json
{
  "mcpServers": {
    "quantaseal": {
      "command": "node",
      "args": [
        "/usr/local/lib/node_modules/@quantaseal/mcp-server/dist/server.js"
      ],
      "env": {
        "QUANTASEAL_API_KEY": "qs_live_..."
      }
    }
  }
}