Hardware-derived entropy delivery with signed provenance, explicit fallback reporting, and post-quantum key encapsulation. Built for cryptographic key generation, secure messaging, and regulated systems.
Every draw includes provenance metadata, health checks, and transparent fallback behavior.
Hardware-derived entropy with a disclosed source_class per draw. Each response carries a provenance record: source class, conditioning method, entropy score, and batch identifier.
If the reservoir is depleted or quality threshold is not met, the API switches to CSPRNG fallback. Always disclosed. Never silent.
Optional hybrid KEM key exchange (X25519 + ML-KEM-1024) with ML-DSA-65 signatures. Implements FIPS 203 (ML-KEM-1024) and FIPS 204 (ML-DSA-65) algorithms.
Append-only hash-linked audit log (R2 JSONL, retention by tier). Available for Verified and Enterprise tiers.
Non-custodial entropy for wallets, dApps, and on-chain protocols. Quantum-safe seeds with signed provenance per draw.
Public routes require no authentication. Authenticated routes require a valid API key.
Service health and version metadata.
Request access or partner with us.
Primary entropy delivery endpoint with fallback reporting.
Hybrid KEM-encrypted entropy with ML-DSA-65 signing.
Verify provenance of a past entropy draw by request ID or attestation.
Retrieve a single audit record or filtered listings.
Current identity and usage reporting for issued API keys.
Self-service API key rotation. New key returned immediately.
Request an API key or explore the developer guide to integrate entropy delivery into your application.