Bankr Keys

Lease a short-lived Bankr wallet API key

Provision a scoped, time-limited Bankr wallet API key for an agent. Privileged, deny-by-default: agent callers need an explicit access policy on agents/{agent_id}/bankr/* in the __agent-keys vault (JWT scope agents/{agent_id}/bankr/lease). Agents may only lease for their own ID. The bk_usr_ key is omitted from the JSON response for agent JWTs — stored server-side for Shroud resolution. Human callers receive api_key once. Requires BANKR_PARTNER_KEY on Vault. Agent default TTL 15 min when omitted; human/org default 1 hour (BANKR_DEFAULT_LEASE_TTL_SECS). Recommend 5–15 min for autonomous agents. Max TTL 24 hours. Max 5 concurrent leases per agent.

post/v1/agents/{agent_id}/bankr-keys/lease

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/agents/{agent_id}/bankr-keys/lease
  • Auth: HTTP bearer

Path parameters

agent_idstring uuid required

Request body

wallet_idstring

Bankr wallet ID (wlt_...). Uses org default if omitted.

ttl_secondsinteger

Lease TTL in seconds (default 3600, max 86400).

Response

Bankr key leased

lease_idstring uuid
api_keystring

Ephemeral bk_usr_ key. Present for human callers only; omitted for agent JWTs.

wallet_idstring
expires_atstring date-time

Changes

No recorded changes to this operation across all 2 revisions of this API.