Key Management

Privately claim an authorized member key once

Only the intended authenticated member can receive this secret. The same transaction consumes the authorization, stores a digest, records a receipt, and revokes the previous key if rotating. Parallel or repeated claims never mint a second key or replay a secret. A lost response requires checking the authorization list; if claimed, request a replacement. Secrets are never returned to another member’s administrator.

post/keys/member/{intentId}/claim

Request

  • Base URL: https://app.arkova.ai/api/v1
  • URL: https://app.arkova.ai/api/v1/keys/member/{intentId}/claim
  • Auth: HTTP bearer

Path parameters

intentIdstring uuid required

Headers

X-Org-Idstring uuid required

Exact selected organization. Requires current membership there; never falls back to the profile organization. Cannot be combined with context=personal.

Request body

object required

Response

Committed key; raw secret returned once

org_idstring uuid required
issuer_user_idstring uuid required
actor_user_idstring uuid required
claimedtrue required
idempotentfalse required
intent_idstring uuid required
key_idstring uuid required
rotation_receipt_idstring uuid required
principal_version1 required
principal_kind'human' required
keystring required

One-time private secret. Do not log or cache.

warningstring required

Changes

No recorded changes to this operation across all 1 revision of this API.