Developers
REST and gRPC APIs, a device SDK, webhooks and a sandbox tenancy — so the security system stops being the one thing nobody can automate.
Platform REST API
Users, credentials, doors, access levels, schedules and events. OpenAPI 3.1 specification, versioned, with a stable deprecation policy.
gRPC event stream
Subscribe to access, video and sensor events in real time, with backpressure handling and replay from a cursor.
Device SDK
Talk to readers and controllers directly from C, Java, .NET or Python for kiosk, lift and bespoke terminal integrations.
Webhooks
Signed, retried delivery of any event type to your endpoint, with a replay console for missed deliveries.
SCIM & LDAP
Provision and deprovision people from your directory so access follows the HR record automatically.
Sandbox tenancy
A free XipherCloud sandbox with simulated devices, so you can build and test before hardware arrives.
Grant access to a contractor for one afternoon
Credentials that expire on their own are the single highest-value thing most teams automate first. It is one call.
- Mobile credential delivered by SMS or email
- Valid for a window you define, then gone
- Every use written to the audit log
POST /v1/credentials
Authorization: Bearer <token>
Content-Type: application/json
{
"person": {
"name": "R. Okonkwo",
"email": "r.okonkwo@contractor.example"
},
"type": "mobile",
"access_levels": ["plant-floor-b"],
"valid_from": "2026-09-02T13:00:00Z",
"valid_to": "2026-09-02T18:00:00Z",
"deliver": "email"
}Request developer access
Tell us what you are building. We will issue sandbox credentials, the current OpenAPI specification and the SDK package, and put you in touch with an engineer who has done the integration before.