Product

The QURL API

One API call creates temporary, cryptographically-secured access to any web resource. No infrastructure changes. No client to install.

Core Technology

Introducing the QURL

A QURL (Quantum URL — say “curl”) is not a login link. It’s a temporary wormhole. A single-use, time-bound access credential that brings a service into existence for one user and collapses when the session ends. Without a QURL, the target doesn’t exist on the network. You can’t attack what isn’t there.

🔒

Before QURL

Service is cryptographically unreachable. No open ports, no DNS resolution, no visible endpoints. Scanners find nothing.

QURL Active

Identity verified. Wormhole opens. Short-lived, private access session where the service temporarily exists for this user only.

👻

After Session

Access path removed. QURL consumed and destroyed. Service returns to invisible state. Audit trail preserved.

QURLs don’t log users in. They temporarily bring services into existence.

Magic Links / Pre-signed URLs

  • One-time authentication only
  • Site remains publicly reachable
  • Attack surface unchanged
  • Target exists whether or not link is used

QURLs

  • One-time access to invisible resource
  • Service unreachable before and after
  • Attack surface eliminated entirely
  • Target doesn’t exist without the wormhole
How It Works

You define. LayerV returns.

You Define

Identity

Who needs access — user, service account, or AI agent

Resource

What they can access — app, endpoint, or dashboard

Duration

How long access exists — minutes, hours, or days

LayerV Returns

One-Time QURL

A unique, single-use access link

Session Metadata

Created by, created at, expires at, device binding

Full Audit Trail

Who accessed what and when

API Endpoints

RESTful. Predictable. Fast.

Base: https://api.layerv.ai | Sandbox: https://api.layerv.xyz

POST/v1/qurl

Create a new QURL — single-use, time-bound access

GET/v1/qurl

List all QURLs with pagination and filtering

GET/v1/qurl/{id}

Get details for a specific QURL

PATCH/v1/qurl/{id}

Update QURL — extend TTL, modify access policy

DELETE/v1/qurl/{id}

Revoke a QURL immediately

GET/v1/quota

Check usage, rate limits, plan details

POST/v1/webhooks

Subscribe to QURL lifecycle events

Capabilities

Built for production

Idempotency

All mutating endpoints support Idempotency-Key headers.

ETag Caching

GET endpoints return ETags. 304 responses when unchanged.

Webhooks

Real-time QURL lifecycle events. HMAC-SHA256 signed.

RFC 7807 Errors

Structured errors with type, title, status, detail.

Geo & Device Policies

Lock QURLs to countries, IPs, or device fingerprints.

Cursor Pagination

Stable cursors across large result sets.

Ready?

One API call to invisible

Free tier. Full API access. No credit card.