Code examples

Reference clients, packaged for inspection.

Each package demonstrates the same login exchange: canonicalize exact bytes, sign with a persistent Ed25519 device key, refuse redirects, and verify the pinned Konvoa response key.

Reference implementation scope

The examples exercise the security-critical login exchange and are intentionally explicit. The C++ SDK is the maintained native integration with the broader product API.

C#

.NET 8. Canonical request signing and pinned response verification reference client.

a02c6a7b4a597840bb291b5aa0a5bcb9a62f2d0a670956529ffda2df6adc2c89
Download ZIP

C++

Native SDK

Maintained native C++ SDK with the broader Konvoa product API. A customer account is required to download it.

a86d626c4c41b58436675a85e33dfa74c663d7e8c7c63e1b840c64a7c4ab4026
Sign in to download SDK

Python

Python 3.10+. Canonical request signing and pinned response verification reference client.

69d09ea6e749e1f5e27ec7d92a3c49151b61cc2f723a1bb74caf193abd9a1f35
Download ZIP

Node.js

Node.js 22+. Canonical request signing and pinned response verification reference client.

7f1bcafa835e6a8789b8c8cb30d5e231d68b7583b53e3eee552b5b3487d1c6aa
Download ZIP

Go

Go 1.22+. Canonical request signing and pinned response verification reference client.

0e8e15cf5626867e60df2771b672e6d25f17e5ea9aca38f646cfe822978b8670
Download ZIP

Rust

Rust 1.88+. Canonical request signing and pinned response verification reference client.

b76529e886a7368228b36ade93d79cc302f5a47e5bfe1b23b94404ff247570aa
Download ZIP

PHP

PHP 8.2+ CLI. Canonical request signing and pinned response verification reference client.

9f2bbdd728f6170e362448e2c43b2ff3bf1112e6b6cd0ed74ed6e7227db58a8a
Download ZIP

Configure before running

Set the application identifier, base origin, response key ID, pinned Ed25519 public key, and a persistent device-key path through the package’s documented environment variables. Never commit a generated private key or customer password.

Verify the archive

Compare the archive’s SHA-256 digest with the JSON manifest or SHA256SUMS before extracting it. Dependency lock files or exact versions are included where the language ecosystem supports them.

Read the protocol guide before adapting the request builder or response verifier.

Start with a client you can inspect.

Download the package for your stack, verify the archive, and follow its build instructions.

Create a free account