Documentation

Typed clients for TypeScript and Python.

The generated clients live under sdk/typescript and sdk/python in the Securelay repository. Use the version matched to the deployed server contract.

TypeScript pattern

TypeScript
import { Configuration, DataApi } from "@securelay/sdk"

const data = new DataApi(new Configuration({
  basePath: process.env.SECURELAY_URL,
  accessToken: process.env.SECURELAY_TOKEN,
}))

// Method names follow the deployment OpenAPI build.
// Keep plaintext in request-local memory only.

Python pattern

Python
import os
import securelay

config = securelay.Configuration(
    host=os.environ["SECURELAY_URL"],
    access_token=os.environ["SECURELAY_TOKEN"],
)

# Use the generated context-managed client.
# Pin the SDK version to the server release.

Production integration checklist

  • Keep service credentials in a workload identity or secret manager.
  • Set timeouts, bounded retries, and stable idempotency keys.
  • Propagate the request identifier into your logs without plaintext.
  • Treat deny and dependency failures as closed, never as a vault bypass.
  • Test rotation, key revocation, erasure, and evidence export before launch.
NextRequest implementation access