Key Custody

Provision a threshold-key share to a runtime holder

The owner's browser unlocks its share with the passkey PRF and re-wraps it to the holder's P-256 key (ECIES: ephemeral point ‖ iv ‖ AES-GCM). The vault stores the ciphertext unopened. The wallet must be delegated to the holder's agent. Audited as client_share.provisioned_to_runtime.

put/v1/keys/{key_id}/client-share/holder

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/keys/{key_id}/client-share/holder
  • Auth: HTTP bearer

Request body

holder_idstring uuid required
wrapped_sharestring required
saltstring required

Response

Stored

Changes

No recorded changes to this operation across all 1 revision of this API.