Skip to main content
NewMythos ready in minutes

Your infrastructure, off the map.

Invisible until a person or AI agent proves they belong. A qURL opens a portal, admits them once, and closes behind them.

Start buildingSee it live
  • CSA-published OpenNHP standard
  • IETF Internet-Draft
  • 13K+ GitHub stars

Open a portal, not a port.

The internet is a map. You’re not on it.

01 The map

Scanners sweep every public address on the internet in minutes. Whatever answers gets pinned — and worked on, around the clock.

02 Off the map

LayerV infrastructure never answers. No open ports, no listeners, no standing address — nothing to scan, probe, or exploit.

03 The portal

When a person or AI agent proves who they are, a qURL opens a portal just for them — one session, identity-bound — then closes and leaves nothing behind.

Invisible to everyone. Available to the proven.
Secure

No attack surface

Protected resources never listen on the public internet. There is nothing to scan, probe, or exploit.

How it stays unexposed →
Easy

No client deployment

Recipients just open a link. No VPN app, no agent, no browser extension.

How access works →
Private

No credential sharing

Access binds to a verified identity. No passwords, API keys, or secrets change hands—so none can leak.

How identity binds →

Open a portal. Watch it close.

Mint a real qURL™ right here — no signup. It admits the first verified requester, works exactly once, and dies on schedule.

Resource to protecthttps://layerv.ai/qurl/playground/demo/q3-financials

Runs live against the qURL sandbox — rate-limited per IP, public HTTPS only.

Up and running in two steps.

One Connector takes the app off the public internet. Portals let verified people and agents back in.

Step 01

Hide your app

Drop a lightweight Connector beside the app. Every tunnel has an open end — this one doesn’t. qURL verifies identity on both ends before anything answers, and the portal that assembles is for that requester alone.

  • Docker sidecarone container beside the app — Docker or Compose
  • Kubernetes · ECSa sidecar in the pod or task
  • MCP Serverhide a private MCP server the same way

Already public — a SaaS app or hosted file? Skip the Connector: one API call wraps it in the same identity-bound, expiring portals.

Connector guide →
Step 02

Open access

When someone needs in, they create a qURL — an identity-bound portal link that verifies the requester, admits them once, and expires on its own. No VPN, no shared credentials.

  • Slack & Discordopen portals where the team already talks
  • API · SDKs · CLIone call from code or terminal — Go, TypeScript, Python
  • AI agentsrequest portals over MCP, no human in the loop
  • Chrome extensionportals from the browser
Explore integrations →

One resource, many portals — each opens on proof, closes alone, and the resource goes back off the map.

What teams protect first.

Internal tools & admin panels

Grafana, Jenkins, staging — no login page left on the internet to find.

Read the playbook

Remote access, no VPN

No concentrator to exploit, no client to install — a portal per resource.

Read the playbook

Private APIs

Nothing to enumerate — machine-to-machine access that expires by itself.

Read the playbook

File & document sharing

A file becomes a single-use portal — delivered once, then gone.

Read the playbook
All use cases →

Your AI agents need what’s private.

MCP tells an agent how to call a tool. A portal decides whether it can connect at all. qURL gives agents time-bound, identity-bound access to private MCP servers, APIs, and internal tools — no human in the loop.

An agent can’t click through an MFA prompt or wait on an IT ticket. It can authenticate with a portal, or be denied.

  • Exposed endpoints
  • Shared API keys
  • ngrok tunnels
  • VPN plumbing
qURL for MCP & agents →Agent quickstart →
The agent side is one call
// the agent received a qURL link —
// one call opens the portal
portal, err := qurl.EnterPortal(ctx, link)
if err != nil {
    return err
}

fmt.Println(portal.ResourceURL) // the resource, reachable

Open your first portal.

Protect anything with a URL — app, API, file, or service — and mint a short-lived qURL for it. Terminal, SDK, or prompt.

client, err := qurl.OpenClient()

resource, err := client.ProtectURL(ctx,
    "https://dashboard.internal.acme.com")

portal, err := resource.CreatePortal(ctx,
    qurl.ValidFor(time.Hour))

fmt.Println(portal.Link) // the qURL to share
Your portal link
qurl.link/at_abc123def456
  • One-time use
  • Available for 1 hour
  • For the approved requester
  • Expires automatically

Give this qURL to the approved person or agent. The portal opens once, then closes for good — nothing to rotate, nothing to revoke.

Get an API key →Full quickstart →

Portals, wherever you build.

MCP

Let MCP-compatible agents create, resolve, list, and manage qURLs without custom integration code.

Open MCP integration

SDK & API

Protect resources and mint portal links from your product with the Go, TypeScript, and Python SDKs — or the REST API.

Open developer quickstart

Slack

Build qURL access into Slack apps and workflows. Admins protect resources, and users request one-time access directly from a channel.

Open Slack integration

Discord

Share files and locations through one-time qURLs inside Discord.

Open Discord integration

We wrote the standard. Then we opened it.

LayerV is built on OpenNHP — the protocol for verifying identity before a protected resource becomes reachable, authored at the Cloud Security Alliance and published as an IETF Internet-Draft. The protocol belongs to the commons; we build the best implementation of it.

Read the spec, inspect the SDKs, or build straight from the source — every SDK is open on GitHub.

  • Gogo get github.com/layervai/qurl-go/qurl
  • TSnpm install @layervai/qurl
  • Pythonpip install qurl-python
  • RESTcurl https://api.layerv.ai/v1/qurls
Explore OpenNHP →View on GitHub →
OpenNHP
  1. 1Authenticate identity
  2. 2Authorize the resource
  3. 3Establish the private route
  4. 4Close the route when access ends
13.8k stars on GitHub

Leave nothing to find.

Protect a resource and open your first portal in minutes. Free tier, no credit card, no sales call — and the standard underneath is open.

Start buildingExplore the API