Key Custody

Commit a share refresh

One transaction: requires a passkey wrap of the new device share, then moves the key onto the new generation (and kit coverage) and deletes every old wrap, runtime holder wraps included (re-provision runtimes after). Audited tss_key.resharded.

post/v1/keys/{key_id}/tss/refresh/commit

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/keys/{key_id}/tss/refresh/commit
  • Auth: HTTP bearer

Path parameters

key_idstring uuid required

Request body

generationinteger required
kit_group_public_keystring required

Hex group public key of the new kit the owner saved.

kit_proofstring required

Base64 Schnorr proof of possession of the new kit's share 3 for generation (@1claw/tss-wasm kit_share_proof). The group key is unchanged by a refresh, so only this proof tells the new kit from the old one. Missing or not matching: 400.

Response

Committed; the key's backup state

Changes

No recorded changes to this operation across all 1 revision of this API.