Endpoint, request, response, error codes, and provenance schema for the live service at api.quantumsecuregateway.com.
Verify entropy proofs against recorded provenance. Verified and Enterprise tiers only.
Retrieve a single provenance record by ID. Verified and Enterprise tiers only.
Service availability and status. No authentication required.
Hybrid KEM (X25519 + ML-KEM-1024) with encrypted entropy payload. Private beta — contact us to join.
Submit a sandbox access request with workload details.
The full schema reference ships with the API client SDKs. Field summary:
| Field | Type | Description |
|---|---|---|
success | boolean | Draw status |
request_id | string (UUID) | Unique request identifier |
timestamp | string | ISO 8601 response timestamp |
data.format | string | Output format (e.g. hex, base64) |
data.length | integer | Bytes requested |
data.entropy | string | The drawn entropy payload |
data.encoding | string | Payload encoding |
provenance.source_class | string | Source class (e.g. hardware-derived) |
provenance.source_id | string | Backend source identifier |
provenance.backend_class | string | Backend class (e.g. quantum) |
provenance.entropy_score | number | Estimated min-entropy score |
provenance.conditioning | string | Conditioning method applied |
provenance.unique_states | integer | Unique quantum states |
provenance.job_epoch | string | Job epoch identifier |
fallback.is_fallback | boolean | true when CSPRNG fallback engaged |
fallback.reason | string | null | Fallback trigger reason, if any |
audit.reservoir_remaining_bits | integer | Remaining reservoir bits |
tier | string | Authenticated tier |
rate_limit.remaining | integer | Requests remaining in window |
billing | object | Units, weight, charged_units (Builder+) |
Draws are billed per unit. A unit weight is computed from length (bytes requested) and the draw's source class:
| Source Class | Unit Weight | Billing Multiplier |
|---|---|---|
hardware-derived | 1.0× | Standard rate per tier |
csprng-fallback | 0.25× | Discounted — 25% of standard rate |
Size weight: each draw is billed at ceil(length / 32) base units. A 32-byte draw is 1 unit; a 256-byte draw is 8 units.
Overage: when monthly usage exceeds the included units, additional draws are billed at the tier's published overage rate. See Pricing for tier breakdown.
Authenticated endpoints accept a bearer token in the Authorization header:
Authorization: Bearer qsg_live_…
API keys are scoped to a single tier and a single billing account. Tier upgrades do not invalidate existing keys; new keys are issued and old keys remain valid until rotation.
For mTLS with customer-managed certificates, contact [email protected].
Sandbox keys provisioned automatically. Full response shape, full audit chain.