LayerV is a preemptive cybersecurity platform that makes infrastructure invisible to attackers. We implement the OpenNHP (Network Hiding Protocol) standard from the Cloud Security Alliance. Instead of detecting attacks after they start, we prevent them by eliminating the attack surface entirely.

How does LayerV work?

LayerV uses a 5-step authentication flow: (1) Knock - encrypted request sent, (2) Verify - identity and policy validated, (3) Grant - temporary connection opened, (4) Connect - resource visible only to authenticated user, (5) Audit - access logged. Protected resources have zero network presence until authentication succeeds.

No. VPNs encrypt traffic but servers remain visible and scannable. LayerV makes servers completely invisible - they have zero network presence until authentication succeeds. This is a fundamentally different approach called Network Hiding.

LayerV is generally available. Free tier includes 500 qURLs/month for developers. Enterprise plans with custom SLAs are available. Try the interactive playground at layerv.ai/qurl/playground — no signup required.

What identity providers does LayerV support?

LayerV integrates with major identity providers including Okta, Azure AD (Entra ID), Google Workspace, Auth0, and Ping Identity. Any OIDC or SAML-compatible provider can be integrated.

A qURL is an identity-bound, single-use, expiring access object — the primitive replacing the URL for the agent era. It is minted by LayerV on the OpenNHP (Network Hiding Protocol) standard, and the resource it points to does not respond on the network until the qURL is presented and identity is proven. Try the interactive qURL Playground at layerv.ai/qurl/playground.

qURL Developer Platform

One API Call. Universal Access.

Turn any application, API, file, MCP server, or private service into an identity-bound qURL accessible by humans and AI agents—without VPNs, login portals, or shared credentials.

✓ Identity-Bound
✓ Single-Use
✓ Invisible by Default

curl -X POST https://api.layerv.ai/v1/qurls \
  -d '{"target_url":"https://internal.example.com"}'

// Response
{ "qurl": "https://qurl.link/..." }

CSA StandardIETF Internet-DraftOpen Source13.8K GitHub Stars

How Universal Access Works

Every Resource Becomes a qURL

One API call creates a secure, identity-bound access path to applications, APIs, files, servers, and MCP services for both humans and AI agents.

qURL Generation FlowqURL Access Flow

1234578

Your Agent

API Call

POST /qurls

qURL Platform

Authenticate

Generate qURL

Protected Resources

Files

Web Apps

APIs

Servers

Resource Connectors

Docker

Desktop

MCP Server

Human Users

AI Agents

qURL Access Token

https://qurl.link/#at_a1b2c3d4

Single-useTTL: 30 minIdentity-Bound

6. Verification

Hidden Resource Portal

https://r_a1b2c3d4.qurl.site

Appears after verificationDisappears after use

Integrate in Minutes

Integrate Anywhere. Deploy Anywhere.

Turn Any Resource Into a qURL with One API Call

12345678
curl -X POST https://api.layerv.ai/v1/qurls \
  -H "Authorization: Bearer $LAYERV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "target_url": "https://internal.example.com/admin",
    "expires_in": "1h",
    "one_time_use": true
  }'

Response

1234567891011
{
  "data": {
    "resource_id": "r_k8xqp9h2sj9",
    "qurl_link": "https://qurl.link/at_abc123def456",Single-use access link
    "qurl_site": "https://r_k8xqp9h2sj9.qurl.site",
    "expires_at": "2026-03-07T14:00:00Z"Auto-expires in 1 hour
  },
  "meta": {
    "request_id": "req_abc123"
  }
}

Every component below is open source. Click on any box to view the reference implementation.

AgentsCLI Slack Agent Discord Agent Chrome Extension

API CallREST API TypeScript SDK Python SDK

qURL PlatformBased on OpenNHP

Resource ConnectorsqURL Connector DockerqURL Connector DesktopqURL MCP Server

Agents

qurl-integrations

Reference Slack Agent and Discord Agent implementations. Generate identity-bound, single-use qURLs directly from chat.

github.com/layervai/qurl-integrations →

API SDKs

qurl-typescript / qurl-python

Official TypeScript and Python SDKs. Mint identity-bound, single-use qURLs from your own applications and services.

github.com/layervai/qurl-typescript →

AI Agents

qurl-mcp

Model Context Protocol integration. Let AI agents and MCP clients request qURL-protected access to tools and resources.

github.com/layervai/qurl-mcp →

Protocol

OpenNHP

The full Network-infrastructure Hiding Protocol reference implementation — the open standard qURL is built on.

github.com/OpenNHP/opennhp →

Performance

Built for Real-Time Access

Identity verification in milliseconds. Enterprise-grade reliability at global scale.

≤ 24 hrs

Time to First Protected Connection

From signup to production protection

< 50ms

Knock-to-Access Latency (p99)

vs 100-300ms for typical VPN handshakes

Discoverable Endpoints

All ports closed until authenticated

99.99%

Handshake Success Rate

With built-in retry and automatic failover

Deployment

Run Anywhere

From fully managed to fully self-hosted

LayerV Cloud

Fully managed qURL infrastructure. Connect your IdP, register resources, and start issuing qURLs in minutes.

Zero infrastructure to manage
Global edge network
99.99% SLA
Pay-per-qURL pricing

Hybrid Deployment

qURL Gateway runs in your VPC while LayerV manages the control plane. Your data never leaves your network.

Data sovereignty
Private networking
Your security perimeter
Managed updates

Self-Hosted

Full platform deployment in your infrastructure. For enterprises with strict compliance or air-gapped requirements.

Complete control
Air-gap compatible
Custom integrations
Enterprise support

Start Building

qURL is the access layer for the AI era.

Upgrade your infrastructure to qURL. Start with the free tier — 500 qURLs/month, no credit card required.

API Playground Docs Get API Keys

One API Call. Universal Access.

Turn any application, API, file, MCP server, or private service into an identity-bound qURL accessible by humans and AI agents—without VPNs, login portals, or shared credentials.

✓ Identity-Bound

✓ Single-Use

✓ Invisible by Default

curl -X POST https://api.layerv.ai/v1/qurls \
  -d '{"target_url":"https://internal.example.com"}'

// Response
{ "qurl": "https://qurl.link/..." }

CSA StandardIETF Internet-DraftOpen Source13.8K GitHub Stars

curl -X POST https://api.layerv.ai/v1/qurls \ -H "Authorization: Bearer $LAYERV_TOKEN" \ -H "Content-Type: application/json" \ -d '{ "target_url": "https://internal.example.com/admin", "expires_in": "1h", "one_time_use": true }'

{ "data": { "resource_id": "r_k8xqp9h2sj9", "qurl_link": "https://qurl.link/at_abc123def456",Single-use access link "qurl_site": "https://r_k8xqp9h2sj9.qurl.site", "expires_at": "2026-03-07T14:00:00Z"Auto-expires in 1 hour }, "meta": { "request_id": "req_abc123" } }