{ "$schema": "https://ucp.dev/schema/v1.json", "ucp_version": "1.0", "generated_at": "2026-04-07T00:00:00Z", "expires_at": "2027-04-07T00:00:00Z", "product": { "id": "qnsqy", "name": "QNSQY", "version": "7.2.0", "tagline": "Post-quantum hybrid data encryption. NIST FIPS 203/204 compliant.", "description": "QNSQY encrypts data using ML-KEM (FIPS 203) + X25519 and ML-DSA (FIPS 204) + Ed25519 hybrid schemes. Quantum computers cannot break the encryption. Files, passwords, and keys never leave the machine. Network access is restricted to the billing API only via seccomp-bpf on Linux. 75 MCP tools cover every operation from encrypt/decrypt to threshold secret sharing, steganography, and PQ migration scanning.", "category": "security", "subcategory": "post-quantum-cryptography", "homepage": "https://quantumsequrity.com", "docs": "https://quantumsequrity.com/docs.html", "pricing_page": "https://quantumsequrity.com/pricing.html", "changelog": "https://quantumsequrity.com/changelog.html", "license": "proprietary", "keywords": [ "post-quantum cryptography", "quantum-resistant encryption", "ML-KEM", "ML-DSA", "NIST FIPS 203", "NIST FIPS 204", "data encryption", "hybrid encryption", "PQC", "MCP tools", "agentic encryption" ], "platforms": ["linux", "macos", "windows"], "binary_name": "qnsqy", "run_modes": ["cli", "gui", "tui", "mcp"] }, "capabilities": { "summary": "75 MCP tools covering all PQC encryption operations. Every operation runs locally: no file content ever reaches the network.", "free_operations": [ "encrypt (ML-KEM-512 + ML-DSA-44, unlimited, no file size limit)", "decrypt (always free, all tiers)", "sign (ML-DSA-44, always free)", "verify (always free)", "hash (BLAKE3/SHA3/SHA256/SHA512)", "hash_verify", "keygen_sign", "keygen_enc", "shred (3-pass secure deletion)", "encode / decode (base64, hex, base32, base58)", "version", "status", "generate_secret" ], "operations": [ { "id": "encrypt", "name": "Data Encryption", "description": "Encrypt a file with hybrid PQC. ML-KEM ciphertext + AEAD-encrypted payload. Signature optional.", "mcp_tool": "qnsqy_encrypt", "required_tier": "free", "credits_per_gb": { "ml-kem512": 0, "ml-kem768": 0, "ml-kem1024": 1, "hqc-128": 1, "hqc-192": 1, "hqc-256": 1, "password-only": 0 }, "output_format": ".qs", "supports_streaming": false }, { "id": "decrypt", "name": "Data Decryption", "description": "Decrypt a .qs file. Always free on all tiers.", "mcp_tool": "qnsqy_decrypt", "required_tier": "free", "credits_per_gb": 0 }, { "id": "sign", "name": "Digital Signing", "description": "Sign a file with ML-DSA + Ed25519 hybrid. Signature embedded in .qs container.", "mcp_tool": "qnsqy_sign", "required_tier": "free", "credits_per_gb": { "ml-dsa44": 0, "ml-dsa65": 0, "ml-dsa87": 1, "slh-dsa": 1, "fn-dsa512": 0, "fn-dsa1024": 0, "lms": 0 } }, { "id": "verify", "name": "Signature Verification", "description": "Verify embedded ML-DSA + Ed25519 hybrid signature. Always free.", "mcp_tool": "qnsqy_verify", "required_tier": "free", "credits_per_gb": 0 }, { "id": "hash", "name": "Cryptographic Hashing", "description": "Compute BLAKE3, SHA3-256/512, SHA-256/512, BLAKE2b/2s, SHAKE256. Always free.", "mcp_tool": "qnsqy_hash", "required_tier": "free", "credits_per_gb": 0 }, { "id": "batch_encrypt", "name": "Batch Encryption", "description": "Encrypt multiple files in one call. Pro+.", "mcp_tool": "qnsqy_batch_encrypt", "required_tier": "pro" }, { "id": "vault", "name": "Encrypted Password Vault", "description": "ML-KEM-512 encrypted credential store. Init, add, get, list, remove, edit, import, export, rekey.", "mcp_tools": ["qnsqy_vault_init", "qnsqy_vault_add", "qnsqy_vault_get", "qnsqy_vault_list", "qnsqy_vault_remove", "qnsqy_vault_edit", "qnsqy_vault_export", "qnsqy_vault_import", "qnsqy_vault_rekey"], "required_tier": "pro" }, { "id": "threshold_encrypt", "name": "M-of-N Threshold Encryption", "description": "Encrypt so that M of N keyholders must cooperate to decrypt. Shamir secret sharing.", "mcp_tools": ["qnsqy_threshold_encrypt", "qnsqy_threshold_decrypt", "qnsqy_split", "qnsqy_combine"], "required_tier": "business" }, { "id": "steganography", "name": "Steganography", "description": "Hide encrypted data inside carrier files (images, audio, PDF, video). PQ-encrypted.", "mcp_tools": ["qnsqy_stego_hide", "qnsqy_stego_extract", "qnsqy_stego_capacity"], "required_tier": "business" }, { "id": "timelock", "name": "Time-Lock Encryption", "description": "Encrypt so the file cannot be decrypted until a future time. Hardware-calibrated.", "mcp_tools": ["qnsqy_timelock_encrypt", "qnsqy_timelock_decrypt", "qnsqy_timelock_calibrate"], "required_tier": "business" }, { "id": "pq_migration", "name": "PQ Migration Scanner", "description": "Scan a directory for classically-encrypted files and auto-migrate to post-quantum.", "mcp_tools": ["qnsqy_scan", "qnsqy_migrate"], "required_tier": "business" } ] }, "algorithms": { "note": "All KEM and DSA operations use hybrid schemes. Classical alone is never used for data encryption.", "kem": [ { "id": "ml-kem512", "standard": "NIST FIPS 203", "security_level": 1, "security_bits": 128, "classical_hybrid": "X25519", "required_tier": "free", "credits_per_gb": 0, "description": "ML-KEM-512 + X25519 hybrid. Default algorithm. Free on all tiers with no file size limit." }, { "id": "ml-kem768", "standard": "NIST FIPS 203", "security_level": 3, "security_bits": 192, "classical_hybrid": "X25519", "required_tier": "pro", "credits_per_gb": 0, "description": "ML-KEM-768 + X25519 hybrid. Free (0 credits) on Pro+. 25 GB file limit." }, { "id": "ml-kem1024", "standard": "NIST FIPS 203", "security_level": 5, "security_bits": 256, "classical_hybrid": "X25519", "required_tier": "pro", "credits_per_gb": 1, "description": "ML-KEM-1024 + X25519 hybrid. NIST Level 5. 1 credit per GB on Pro." }, { "id": "hqc-128", "standard": "NIST Round 4 (code-based)", "security_level": 1, "classical_hybrid": "X25519", "required_tier": "business", "credits_per_gb": 0, "description": "HQC-128 + X25519 hybrid. Code-based KEM as ML-KEM alternative." }, { "id": "hqc-192", "standard": "NIST Round 4 (code-based)", "security_level": 3, "classical_hybrid": "X25519", "required_tier": "business", "credits_per_gb": 0, "description": "HQC-192 + X25519 hybrid." }, { "id": "hqc-256", "standard": "NIST Round 4 (code-based)", "security_level": 5, "classical_hybrid": "X25519", "required_tier": "business", "credits_per_gb": 0, "description": "HQC-256 + X25519 hybrid." } ], "dsa": [ { "id": "ml-dsa44", "standard": "NIST FIPS 204", "security_level": 2, "classical_hybrid": "Ed25519", "required_tier": "free", "credits_per_gb": 0, "description": "ML-DSA-44 + Ed25519 hybrid. Default. Free on all tiers, no file size limit." }, { "id": "ml-dsa65", "standard": "NIST FIPS 204", "security_level": 3, "classical_hybrid": "Ed25519", "required_tier": "pro", "credits_per_gb": 0, "description": "ML-DSA-65 + Ed25519 hybrid. Free (0 credits) on Pro+." }, { "id": "ml-dsa87", "standard": "NIST FIPS 204", "security_level": 5, "classical_hybrid": "Ed25519", "required_tier": "pro", "credits_per_gb": 1, "description": "ML-DSA-87 + Ed25519 hybrid. NIST Level 5. 1 credit/GB on Pro." }, { "id": "slh-dsa", "standard": "NIST FIPS 205", "security_level": "1-5 (6 parameter sets)", "required_tier": "pro", "credits_per_gb": 1, "description": "SLH-DSA stateless hash-based signatures. 6 parameter sets. 1 credit/GB on Pro." }, { "id": "fn-dsa512", "standard": "NIST FIPS 206 (draft) (Falcon-512)", "security_level": 1, "classical_hybrid": "Ed25519", "required_tier": "business", "credits_per_gb": 0, "description": "FN-DSA-512 (Falcon-512) + Ed25519 hybrid. Business only." }, { "id": "fn-dsa1024", "standard": "NIST FIPS 206 (draft) (Falcon-1024)", "security_level": 5, "classical_hybrid": "Ed25519", "required_tier": "business", "credits_per_gb": 0, "description": "FN-DSA-1024 (Falcon-1024) + Ed25519 hybrid. Business only." }, { "id": "lms", "standard": "NIST SP 800-208", "security_level": "configurable", "required_tier": "business", "credits_per_gb": 0, "description": "LMS stateful hash-based signatures. SP 800-208. Requires state management. Business only." } ], "aead": [ { "id": "aes-256-gcm", "standard": "NIST SP 800-38D", "required_tier": "free", "description": "Default symmetric AEAD. Always available." }, { "id": "xchacha20-poly1305", "required_tier": "free", "description": "XChaCha20-Poly1305 AEAD. Free on all tiers." } ], "kdf": [ { "id": "argon2id", "standard": "RFC 9106", "preset_standard": {"memory_mb": 128, "iterations": 3, "required_tier": "free"}, "preset_high": {"memory_mb": 256, "iterations": 3, "required_tier": "pro"}, "preset_maximum": {"memory_mb": 512, "iterations": 4, "required_tier": "business"} } ] }, "pricing": { "currency": "USD", "payg_credit_usd": 0.05, "usdc_per_credit": "0.05", "usdc_preferred_chain": "base", "usdc_payment_protocol": "x402", "tiers": [ { "id": "free", "name": "Free", "price_monthly_usd": 0, "price_annual_usd": 0, "credits_monthly": 20, "max_file_size_bytes": 104857600, "max_file_size_label": "100 MB (advanced algorithms only: ML-KEM-512 is always unlimited)", "trial": "14-day free Pro trial on signup", "free_algorithms": ["ml-kem512", "ml-dsa44"], "features": [ "ML-KEM-512 + ML-DSA-44: unlimited operations, 0 credits, no file size limit", "AES-256-GCM + XChaCha20-Poly1305 AEAD (both NIST-approved, all tiers)", "Argon2id standard preset (128 MB)", "BLAKE3 integrity verification", "Encrypt / Decrypt / Sign / Verify / Hash / Shred", "CLI + GUI + TUI", "All platforms (Linux, macOS, Windows)", "Linux seccomp-bpf network blocking", "$0.05/credit PAYG for advanced algorithms" ] }, { "id": "pro", "name": "Pro", "price_monthly_usd": 29, "price_annual_usd": 290, "annual_savings_pct": 17, "credits_monthly": 1200, "credit_rollover_max": 1800, "credit_rollover_pct": 50, "max_file_size_bytes": 26843545600, "max_file_size_label": "25 GB (advanced algorithms)", "free_algorithms": ["ml-kem512", "ml-kem768", "ml-dsa44", "ml-dsa65"], "features": [ "Everything in Free", "ML-KEM-512/768 + ML-DSA-44/65: unlimited, 0 credits, no file size limit", "1,200 credits/month (50% rollover, max 1,800)", "Argon2id high preset (256 MB)", "Batch operations (encrypt/decrypt/verify)", "Password rekey", "Encrypted password vault", "Audit logging with hash chain", "Key import/export", "$0.05/credit PAYG after 1,200" ] }, { "id": "business", "name": "Business", "price_monthly_usd": 149, "price_annual_usd": 1490, "annual_savings_pct": 17, "credits_monthly": "unlimited", "max_file_size_bytes": null, "max_file_size_label": "Unlimited", "free_algorithms": "all", "features": [ "Everything in Pro", "Unlimited credits/month", "FN-DSA-512/1024 (FIPS 206 (draft) Falcon) + Ed25519 hybrid", "HQC-128/192/256 + X25519 code-based KEM", "Pure KEM mode (no classical hybrid)", "LMS stateful signatures (SP 800-208)", "M-of-N threshold encryption", "Shamir secret sharing", "Time-lock encryption", "Steganography (image/audio/PDF/video carriers)", "Deniable encryption", "Polyglot files (dual-format carrier + encrypted payload)", "PQ Migration Scanner + auto-migrate", "Recipient groups + encryption policy", "Key escrow + recovery", "SIEM export (CEF/JSON/Syslog)", "Argon2id maximum preset (512 MB)", "Compliance documentation package on request (control mapping, algorithm usage, data flow)", "Priority support (24h response)" ] } ], "credit_costs": { "note": "1 credit = 1 GB of data processed per encrypt/sign operation. Decrypt, verify, hash, keygen, shred are always 0 credits on all tiers.", "ml-kem512": 0, "ml-kem768": 0, "ml-kem1024": 1, "hqc-128": 0, "hqc-192": 0, "hqc-256": 0, "ml-dsa44": 0, "ml-dsa65": 0, "ml-dsa87": 1, "slh-dsa": 1, "fn-dsa512": 0, "fn-dsa1024": 0, "lms": 0, "password-only-encrypt": 0 } }, "purchase": { "signup_url": "https://quantumsequrity.com/signup.html", "login_url": "https://quantumsequrity.com/dashboard.html", "upgrade_url": "https://quantumsequrity.com/buy.html", "api_key_endpoint": "https://billing.quantumsequrity.com/v1/login", "payment_methods": ["card", "usdc"], "mcp_signup_tool": "qnsqy_signup", "mcp_login_tool": "qnsqy_login", "agent_flow": { "step_1": "Call qnsqy_signup with email to create account and receive API key", "step_2": "Call qnsqy_login with api_key to store credentials locally", "step_3": "Call qnsqy_status to confirm tier and credit balance", "step_4": "Call qnsqy_encrypt / qnsqy_sign / etc.: billing is automatic", "alternative_usdc": "Call qnsqy_pay_usdc with payment proof for pay-per-use without subscription" } }, "mcp": { "protocol": "JSON-RPC 2.0", "transport": "stdio (Content-Length framing)", "protocol_version": "2024-11-05", "start_command": "qnsqy --mcp", "alt_start_command": "qnsqy-mcp", "rate_limit": { "calls_per_minute": 60, "behavior": "fail-closed (returns error, does not queue)" }, "tool_count": 79, "tool_categories": [ "Core Crypto (encrypt, decrypt, sign, verify, hash, symmetric)", "Key Management (keygen, import, export)", "Batch Operations", "Audit + Rekey", "Password Vault (9 tools)", "Threshold / Secret Sharing (4 tools)", "Time-Lock (3 tools)", "Steganography (3 tools)", "Keyfile (3 tools)", "Deniable Encryption (2 tools)", "PQ Migration (2 tools)", "Policy (3 tools)", "Recipient Groups (6 tools)", "Escrow (2 tools)", "Polyglot (3 tools)", "Account / Auth (signup, login, logout, status, usage, devices)", "Commerce (product_info, get_quote, pay_usdc, usage_summary)" ], "security": { "sandbox": "seccomp-bpf on Linux (same as CLI), Landlock filesystem restrictions", "memory": "mlock() prevents swap, zeroize on drop", "passwords": "never echoed, never logged", "private_keys": "never returned via MCP wire protocol", "output_truncation": "10 KB max per response", "network": "blocked for all operations except billing.quantumsequrity.com" }, "initialize_example": { "request": { "jsonrpc": "2.0", "id": 1, "method": "initialize", "params": { "protocolVersion": "2024-11-05", "clientInfo": {"name": "my-agent", "version": "1.0"}, "capabilities": {} } }, "response_fields": ["protocolVersion", "serverInfo", "capabilities"] }, "tools_list_method": "tools/list", "tools_call_method": "tools/call" }, "authentication": { "methods": [ { "type": "api_key", "description": "API key stored locally by qnsqy_login. Retrieved from signup or dashboard.", "how_to_obtain": "qnsqy_signup (email) → returns api_key shown once", "how_to_store": "qnsqy_login (api_key) → stored in OS credential store", "scope": "all operations for the authenticated user's tier" }, { "type": "usdc_micropayment", "description": "Pay-per-use with USDC via x402 protocol. No subscription required. Ideal for AI agents making sporadic requests.", "protocol": "x402", "denomination": "USDC", "price_per_credit": "0.05 USDC", "supported_chains": [ { "chain": "base", "chain_id": 8453, "usdc_contract": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "confirmations": 12, "preferred": true, "note": "Lowest gas fees, fastest finality" }, { "chain": "ethereum", "chain_id": 1, "usdc_contract": "0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48", "confirmations": 12 }, { "chain": "polygon", "chain_id": 137, "usdc_contract": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359", "confirmations": 128 } ], "how_to_use": "1. GET /v1/atxp/catalog for pricing. 2. POST /v1/atxp/quote with operation details. 3. Send USDC to payment address from quote. 4. POST /v1/atxp/verify with tx_hash to receive payment_token. 5. Pass payment_token in MCP tool call.", "atxp_endpoints": { "catalog": "https://billing.quantumsequrity.com/v1/atxp/catalog", "quote": "https://billing.quantumsequrity.com/v1/atxp/quote", "verify": "https://billing.quantumsequrity.com/v1/atxp/verify", "balance": "https://billing.quantumsequrity.com/v1/atxp/balance", "prepay": "https://billing.quantumsequrity.com/v1/atxp/prepay" }, "quote_ttl_seconds": 300, "prepay_discount_percent": 10 } ], "unauthenticated_access": "Free tier operations (ML-KEM-512 + ML-DSA-44 encrypt/decrypt/sign/verify) are available without authentication up to the free credit limit." }, "rate_limits": { "mcp_calls_per_minute": 60, "mcp_behavior_on_limit": "fail-closed, returns JSON-RPC error code -32000", "billing_api_auth_attempts": 5, "billing_api_lockout_minutes": 15 }, "support": { "email": "support@quantumsequrity.com", "security": "security@quantumsequrity.com", "sales": "sales@quantumsequrity.com", "docs": "https://quantumsequrity.com/docs.html", "guide": "https://quantumsequrity.com/guide.html", "faq": "https://quantumsequrity.com/faq.html", "changelog": "https://quantumsequrity.com/changelog.html" }, "compliance": { "standards": ["NIST FIPS 203", "NIST FIPS 204", "NIST FIPS 205", "NIST FIPS 206 (draft)", "NIST SP 800-208", "RFC 9106 (Argon2id)"], "compliance_docs_available": ["Control-mapping documentation on request"], "compliance_docs_tier": "business", "certifications_held": "None. QNSQY is not FIPS-validated, SOC 2-certified, FedRAMP-ATO, or HIPAA-audited, and does not sign HIPAA Business Associate Agreements. Documentation packages are a starting point for your internal or third-party audit.", "data_handling": "File content, passwords, and keys never leave the machine. Only billing metadata is transmitted, encrypted with ML-KEM-1024 + X25519 + AES-256-GCM PQC envelope.", "network_isolation": "Linux CLI: seccomp-bpf blocks all network syscalls except billing.quantumsequrity.com (KillProcess on violation). Windows/macOS: physical air-gap recommended for maximum isolation." } }