# QOMPLX

> QOMPLX, Inc. is a Reston, Virginia research and technology company building risk-analytics and
> cybersecurity products — Identity Threat Detection and Response (ITDR), Managed Detection and
> Response (MDR), attack-surface monitoring, Active Directory security assessment, offensive
> security services and vCISO — sold into finance, legal and insurance. Its data platform,
> QOMPLX:OS (Q:OS), includes TimeEngine, a multi-dimensional time-series database and analytics
> engine exposed over HTTP and WebSocket.

Generated by API Evangelist from public sources on 2026-08-26. QOMPLX does not publish an
llms.txt of its own: https://www.qomplx.com/llms.txt returns HTTP 200 with the site's HTML
homepage shell, not a document.

## What an agent can and cannot do here

- There is **no OpenAPI, AsyncAPI, GraphQL SDL or Postman collection** published by QOMPLX anywhere.
- There is **no developer portal, API reference, getting-started guide, changelog, status page or
  pricing page**.
- There is **no MCP server and no A2A agent card**.
- The TimeEngine API is **self-hosted**: the base URL is `https://{host}:{port}/api/v1` supplied by
  the operator, not a QOMPLX-run endpoint. There is no host an agent can call without a deployment.
- www.qomplx.com currently serves a single-page Ghost install. Every content page listed in its own
  sitemap — including the terms of service, privacy policy, vulnerability disclosure policy, bug
  bounty page, SLA and the contact-sales forms — returns an **HTTP 301 self-redirect loop** and is
  unreadable.

## API

- [QOMPLX TimeEngine HTTP API](https://github.com/QOMPLX-INC/te-python-client): RPC-over-HTTP.
  Every operation is a POST. Ingest at `/api/v1/ingest`, query language at `/api/v1/ql`, deferred
  results at `/api/v1/result`, key administration at `/api/v1/admin`, streaming at
  `/api/v1/ws/{key}`. Responses may stream as RFC 7464 JSON text sequences.

## Client libraries (first-party, source-only)

- [te-python-client](https://github.com/QOMPLX-INC/te-python-client): `mdtsdb` 3.1, 2021-11-04. Not on PyPI.
- [te-java-client](https://github.com/QOMPLX-INC/te-java-client): `com.qomplx.mdtsdb:mdtsdb-client` 3.1.8, 2022-05-23. Not on Maven Central.
- [te-erlang-client](https://github.com/QOMPLX-INC/te-erlang-client): `mdhc`, 2021-11-04. Not on Hex.
- [te-python-client-cases](https://github.com/QOMPLX-INC/te-python-client-cases): sample use cases — forecast, Prometheus, tasks, interactive shell.

All four carry "Copyright 2015-2021 -- QOMPLX, Inc. -- All Rights Reserved. No License Granted."
They are readable source, not licensed open source.

## Authentication

- HMAC-SHA256 request signature over `'/'+uri+'\n'+content_type+'\n'+sha256(payload)`, sent as
  `Authorization: MDTSDB2<key> <signature>`, using an application key or an admin key plus a secret key.
- Or OAuth 2.0 client-credentials against an operator-supplied Keycloak token endpoint, sent as
  `Authorization: Bearer <token>`.
- The client defaults to plain HTTP on 127.0.0.1:8080; TLS is opt-in.

## Errors

Nine numeric thousand-blocks: 1xxx permission denied, 2xxx service timeout / overload protection,
3xxx protocol, 4xxx query language, 5xxx bad request / server limitations, 6xxx database, 7xxx AMQP,
8xxx data format, 9xxx general. Envelope is `{"error": {"code", "message", "details"}}` — not RFC 9457.
A `message` of "the job is postponed" is not an error: it carries a `details.uuid` handle to poll.

## Runtime semantics

- No idempotency keys. Ingestion is append-only, so retries duplicate points.
- No pagination. Large result sets stream as `application/json-seq`.
- No rate-limit response headers. A per-application-key `day_limit` exists on the admin plane but no
  value, window or exhaustion status is published.
- No dry-run or preview mode.
- No documented reversal operation or window for any write. Key deletion is irreversible as published.

## Artifacts in this profile

- authentication/qomplx-authentication.yml
- conventions/qomplx-conventions.yml
- errors/qomplx-error-codes.yml
- lifecycle/qomplx-lifecycle.yml
- conformance/qomplx-conformance.yml
- packages/qomplx-packages.yml
- rate-limits/qomplx-rate-limits.yml
- plans/qomplx-plans-pricing.yml
- mcp/qomplx-mcp.yml (candidate only — no server exists)
- well-known/qomplx-well-known.yml (every path 404)
- security/qomplx-domain-security.yml

## Optional

- [QOMPLX website](https://www.qomplx.com/)
- [GitHub: QOMPLX-INC](https://github.com/QOMPLX-INC)
- [GitHub: qomplx](https://github.com/qomplx)