Getting started with QuantumAPI
What the platform does, the handful of concepts you need, and a guided look around the portal before you store your first secret.
QuantumAPI is a European platform for protecting credentials, keys and identities with post-quantum cryptography. Everything runs on EU infrastructure and every secret is encrypted with NIST-standardised algorithms (ML-KEM-768 + AES-256-GCM by default), so data you store today stays safe even against a future quantum computer.
The three products
| Product | What it does | Start here |
|---|---|---|
| QuantumVault | Stores secrets (passwords, API keys, connection strings, certificates…), shares them safely, rotates them and issues short-lived credentials. | QuantumVault tutorial |
| QuantumKey | Post-quantum encryption keys, encrypt/decrypt and signing APIs, transit encryption and quantum random numbers. | QuantumKey overview |
| QuantumID | Identity and access management: SSO, OIDC, MFA, passkeys and user management for your own applications. | QuantumID overview |
You can use one product or all three from the same account. This guide and the Quick start focus on QuantumVault, the natural first step for most teams.
Key concepts
- Organisation (tenant): your company's isolated space. All data, keys and users belong to exactly one organisation. The name is shown in the top-left corner of the portal.
- Members and roles: people you invite get one role:
owner(everything, including billing),admin(users, apps, keys),developer(apps and API keys) orviewer(read-only). - Encryption key: the post-quantum (ML-KEM-768) key that protects your vault. Every organisation gets a default one automatically; you can create more under Keys.
- Secret: any sensitive value plus its context (type, username, URLs, notes, TOTP, labels, folder). Every change creates a new version.
- API key: a credential with limited scopes that lets your applications, scripts and the
qapiCLI call the API. - Resource groups and access policies: bundle secrets and grant precise permissions to users, groups or API keys.
A look around the portal
Sign in at portal.quantumapi.eu. You land on the Dashboard, which summarises your vault entries, keys, applications, API keys, API usage and compliance score.
The navigation rail on the left groups the portal into sections: Dashboard, Vault, Keys, Organization, Settings and Support (plus ID when QuantumID is enabled). Selecting a section opens its menu in the second column. The search bar at the top (⌘K / Ctrl+K) finds any vault item, key or identity.
The first time you open a page, a short guided tour highlights its main actions. Use Next to follow it or the × to close it; you can replay it at any time from the user menu → Help & Tour.
Your encryption key
You don't need to create an encryption key before storing secrets. Every organisation gets a default ML-KEM-768 key automatically: when the organisation is created or, at the latest, with its first secret. You'll find it under Keys → Encryption Keys, where you can also create more keys for your own applications.
Ways to work with QuantumAPI
- Portal: everything described in these tutorials, from the browser.
- REST API:
https://api.quantumapi.eu/api/v1/…, authenticated with theX-Api-Keyheader. See the API reference. - CLI:
qapi, ideal for terminals and CI/CD. See CLI. - SDKs: TypeScript, Python, .NET and Rust.
- MCP server: let AI assistants use your vault safely. See MCP.