Unified Edge Secure Protocol Architecture

Voice, video, chat and IoT – device to device, no central server.

UESPA is an SDK that lets your apps and devices form an encrypted mesh. Local radio, internet P2P or swarm relay – always the cheapest path, even with no internet at all.

  • One Rust core, 21 targets
  • End-to-end encrypted (MLS)
  • 128-byte heartbeat, offline-first
  • Made in Germany · GDPR

What UESPA brings to your app

Chat & groups

1:1 and group chat with MLS (RFC 9420), store & forward via full hops, delivery even while the recipient is offline.

Voice & video

Opus audio and H.264 video over QUIC with NAT hole punching. Calls only ring with a mutual ContactToken – no spam.

IoT pub/sub instead of MQTT

Wildcard topics (home/+/temp) without a broker. Device commands require the owner's CapabilityToken and replay protection.

Offline mesh

Devices pick the cheapest path themselves: local radio/LAN, internet P2P or swarm relay. Works without internet.

Secure by design

Signed LicenseCerts verified offline; only public keys in the SDK; hardened Rust core; location only as a 5 km region.

Multi-tenant

Strict separation per app ID; Pro adds up to 8 tenant IDs per app. Relayed globally, delivered only within your namespace.

How UESPA finds the path

  1. 1 · Local air

    Wi-Fi Direct, BLE, LoRa or LAN – devices in range talk directly, no carrier involved.

  2. 2 · Internet P2P

    Devices meet via UDP rendezvous at the UESPA authority and open a direct QUIC connection.

  3. 3 · Swarm relay

    If neither works, other UESPA devices forward encrypted traffic. Every device is a hop – the network grows with every app.

Into the mesh in five minutes

Sign up, register an app ID, download your LicenseCert – and initialise the SDK.

Privacy you can verify

  • End-to-end encryption for chat, groups, voice and video
  • No plaintext on relays – not even on ours
  • Location only as a 5 km geohash, precise position only on opt-in
  • Operated in Germany by Lucksmith e.K.
rust
use uespa_core::{LicenseInput, UespaConfig, UespaEngine};

// LicenseCert aus dem Developer-Portal (Base64-dekodiert, 294 Byte)
let cert: Vec<u8> = load_license()?;
let mut cfg = UespaConfig::new(LicenseInput::Cert(cert), device_seed /* 32 B aus dem Keystore */);
cfg.tenants = vec![tenant_id]; // nur Pro: Mandanten aus dem Portal

let hal = uespa_core::transport_std::StdUdpTransport::bind(0, "com.example.chat")?;
let mut uespa = UespaEngine::init(cfg, hal)?;     // prüft das Zertifikat offline

uespa.chat().send_text(&peer_pk, "Hallo")?;
uespa.bus().subscribe("home/+/temp")?;
uespa.bus().publish("home/kitchen/temp", b"21.5")?;

loop {
    uespa.tick();
    while let Some(ev) = uespa.poll_event() { /* UespaEvent::… */ }
}

Start small, scale globally

Free

€0
  • 1 Apps (app_ids)
  • – Tenant IDs per app
  • 100 Devices per license
  • 90 days LicenseCert validity
  • – Cross-app federation
Start free

Enterprise

on request
  • 100 Apps (app_ids)
  • 8 Tenant IDs per app
  • 1,000,000 Devices per license
  • 365 days LicenseCert validity
  • Yes Cross-app federation
Contact us

FAQ

What is UESPA?

UESPA stands for Unified Edge Secure Protocol Architecture. It is an SDK that lets apps and devices communicate via chat, voice, video and IoT pub/sub without a central server – end-to-end encrypted and offline-capable.

Do I need my own server?

No. Devices form the network themselves. The UESPA authority at uespa.io only issues licenses, helps with NAT rendezvous and receives anonymous 128-byte heartbeats.

Which platforms does the SDK support?

ESP32 (C3, C5, C6, P4), STM32 and other Cortex-M, RISC-V, Linux (x86_64, ARM), Windows, macOS, Android and iOS – one Rust core with C ABI, Kotlin, Swift and Python wrappers.

Can UESPA replace MQTT?

Yes. The bus offers MQTT-style wildcard topics without a broker, and device commands are additionally secured with CapabilityTokens.

How much does UESPA cost?

Free costs nothing (1 app, 100 devices). Pro and Enterprise add more apps, up to 8 tenants per app and more devices; pricing on request.

What does tenant isolation mean in UESPA?

Every app has its own namespace (app_id). From Pro, an app can carry up to 8 tenant IDs, e.g. per customer. Other apps' traffic is relayed encrypted but never delivered to your app.

Is UESPA GDPR-friendly?

UESPA is built for data minimisation: content is end-to-end encrypted, heartbeats contain no personal content and location only as a 5 km region. The provider is Lucksmith e.K., Germany.

Build the network that grows with every app.

Free account, instant sandbox, LicenseCert in minutes.

Create free account