cPod SDK

cPod is an enterprise data platform built around a unified, graph-connected Enterprise Data Model (EDM). The cPod SDK is the typed access layer for that platform — available in TypeScript, Python, Go, and .NET.

Every SDK call is authenticated, authorized, and audited by the platform’s security layer automatically. You write business logic; cPod handles identity, policy enforcement, PII masking, and audit trails.

What You Can Do

Quick Start

npm install @cpod/sdk

import { CpodClient } from '@cpod/sdk'
 
const sdk = CpodClient.fromEnv()
// CPOD_API_KEY=cpod_xxxxxxxxxxxxxxxxxxxx
// CPOD_BASE_URL=https://api.yourdomain.com  (optional)
 
const people = await sdk.people.list({ limit: 20 })
console.log(people.items)

pip install cpod-sdk

from cpod import AsyncCpodClient
 
sdk = AsyncCpodClient.from_env()
# CPOD_API_URL=https://api.yourdomain.com
# CPOD_CLIENT_ID=app-myservice
# CPOD_CLIENT_SECRET=cs_xxxx
 
people = await sdk.people.list(limit=20)
print(people.items)

go get github.com/cpod-ai/cpod-sdk-go

sdk, _ := cpod.FromEnv()
// CPOD_API_URL=https://api.yourdomain.com
// CPOD_CLIENT_ID=app-myservice
// CPOD_CLIENT_SECRET=cs_xxxx
 
people, _ := sdk.People.List(ctx, cpod.ListOptions{Limit: 20})
fmt.Println(people.Items)

dotnet add package Cpod.SDK

var sdk = CpodSDK.FromEnv();
// CPOD_API_URL=https://api.yourdomain.com
// CPOD_CLIENT_ID=app-myservice
// CPOD_CLIENT_SECRET=cs_xxxx
 
var people = await sdk.People.ListAsync(limit: 20);
Console.WriteLine(people.Items);

The SDK manages OAuth tokens automatically — it fetches, caches, and refreshes them transparently using your CPOD_CLIENT_ID and CPOD_CLIENT_SECRET.

How Authentication Works

Your App  →  REST (Bearer <jwt>)  →  cpod-backend  →  gRPC [::1]:50051  →  CoreSDK Sidecar

The platform’s auth layer (CoreSDK) is a Rust security sidecar that runs alongside cpod-backend. It handles:

• OAuth 2.0 — token issuance, scope enforcement, PKCE flows
• Policy — per-tenant Rego/OPA rules evaluated on every request
• Audit — hash-chained tamper-evident log of every auth decision
• PII masking — automatic masking of sensitive fields before storage

Your app never calls CoreSDK directly. The SDK talks REST to cpod-backend, which proxies all auth decisions internally.

Enterprise Data Model

The EDM is a graph-connected schema that spans your entire organization. Entities across domains are linked via typed Relationship edges, enabling queries like:

• Which people have access to which technology assets?
• Which licenses are assigned to which persons in which group?
• Which cloud resources are affected by which vulnerabilities?

All SDK types derive from the canonical EDM schemas (JSON Schema Draft 2020-12). The TypeScript SDK generates types first; Python, Go, and .NET types derive from the same definitions.

What’s Available

The table below shows coverage across all four SDK languages, docs, and the local emulator.

Explore the Docs