Code examples

Reference clients, packaged for inspection.

Each package demonstrates the same login exchange: canonicalize exact bytes, sign with a persistent Ed25519 device key, refuse redirects, and verify the pinned Konvoa response key.

Reference implementation scopeThe examples exercise the security-critical login exchange and are intentionally explicit. The C++ SDK remains the maintained native integration with the broader product API.

C#

.NET 8. Canonical request signing and pinned response verification reference client.
SHA-256 ad88b78449ce5f60d857b7c0da8cc25e1ac4983ea275c96ae9e6517b29d36f7f

Download ZIP

C++

Maintained native C++ SDK with the broader Konvoa product API. A customer account is required to download it.

Sign in to download SDK

Python

Python 3.10+. Canonical request signing and pinned response verification reference client.
SHA-256 808477f01d2e0e84cc6a84fbb2d935a17f4a79a1c07ffa70ac20b96d74363cc3

Download ZIP

Node.js

Node.js 22+. Canonical request signing and pinned response verification reference client.
SHA-256 bb2732ea04b1af1903cea4e4cec31c3a3cc3f42243f518aca294975b4cc68b5a

Download ZIP

Go

Go 1.22+. Canonical request signing and pinned response verification reference client.
SHA-256 f2c49c44b27b331378c9a9ec4622512cfa30ca009f37b31758b2e96fd9a3af3d

Download ZIP

Rust

Rust 1.88+. Canonical request signing and pinned response verification reference client.
SHA-256 4ea248a6c9da40f8eb268e18156d903b2b1acbe5203f6db9efac0071027ad531

Download ZIP

PHP

PHP 8.2+ CLI. Canonical request signing and pinned response verification reference client.
SHA-256 8bba8eecad3a3c7360a126fda0228bf103a8e3dc6e9670aa78e259dfb61a648d

Download ZIP

Configure before running

Set the application identifier, base origin, response key ID, pinned Ed25519 public key, and a persistent device-key path through the package’s documented environment variables. Never commit a generated private key or customer password.

Verify the archive

Compare the archive’s SHA-256 digest with the JSON manifest or SHA256SUMS before extracting it. Dependency lock files or exact versions are included where the language ecosystem supports them.

Read the protocol guide before adapting the request builder or response verifier.