Vaults

Enable MPC custody on a vault

Enable MPC custody on an existing vault. Requires Business or Enterprise plan. Splits secret encryption keys across multiple providers using the specified custody mode (e.g. 2-of-2, 2-of-3).

post/v1/vaults/{vault_id}/mpc

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/vaults/{vault_id}/mpc
  • Auth: HTTP bearer

Path parameters

vault_idstring uuid required

Request body

mpc_custodystring required

MPC custody mode (e.g. "2-of-2", "2-of-3")

Response

MPC custody enabled

idstring uuid required
namestring required
descriptionstring
created_bystring
created_by_typestring
created_atstring date-time required
cmek_enabledboolean

Whether client-managed encryption is enabled

cmek_fingerprintstring

SHA-256 fingerprint of the CMEK key (64 hex chars)

mpc_custodystring

MPC custody mode (e.g. "2-of-2", "2-of-3"), absent when MPC is not enabled

mpc_thresholdinteger

Number of shares required to reconstruct the key

mpc_providersstring[]

List of MPC share providers (e.g. ["server", "client"])

Changes

No recorded changes to this operation across all 2 revisions of this API.