FAQ

Is the Developer Portal the SaaS Admin Console?

No. The Developer Portal is for documentation, SDKs, examples, release notes, and API reference. The SaaS Admin Console is for operational administration, including developers as RBAC-scoped users.

Why does the SaaS still have a Developers section?

Because integration developers may need scoped operational access to customers/domains. That access must be managed and audited in the SaaS, not through the public documentation portal.

Can I put the provisioning token in a frontend app?

No. Provisioning tokens are backend-only secrets.

Does challenge verified mean my app should create a session?

Not by itself. The application should also check customer/domain context, device state, verifier evidence, expiration, and local policy.

Which SDK should I use first?

Use @qvtm/control-plane for backend provisioning and invite workflows. Add @qvtm/trust-verifier when your application needs to verify evidence before granting access. Use Swift for mobile approval flows and Rust for systems-level QVTM integrations.