Key Custody

Register the runtime's sidecar as a share holder

Called by the runtime's agent (the Shroud sidecar, at boot) with the P-256 public key it generated. The owner can then provision a threshold-key share to this runtime, letting the agent co-sign below-cap sends unattended. Re-registering replaces the key; deleting the runtime revokes every share held by it.

post/v1/runtimes/{runtime_id}/tss/holder

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/runtimes/{runtime_id}/tss/holder
  • Auth: HTTP bearer

Request body

public_keystring required

Base64 SEC1 uncompressed P-256 point (65 bytes).

Response

Registered

holder_idstring uuid
runtime_idstring uuid
agent_idstring uuid
public_keystring
registered_atstring date-time
last_seen_atstring date-time

Changes

No recorded changes to this operation across all 2 revisions of this API.