---
title: "Privately claim an authorized member key once"
method: POST
path: "/keys/member/{intentId}/claim"
tags: ["Key Management"]
---

# Privately claim an authorized member key once

`POST /keys/member/{intentId}/claim`

## Request

- Base URL: `https://app.arkova.ai/api/v1`
- URL: `https://app.arkova.ai/api/v1/keys/member/{intentId}/claim`
- Auth: HTTP bearer

Only the intended authenticated member can receive this secret. The same transaction consumes the authorization, stores a digest, records a receipt, and revokes the previous key if rotating. Parallel or repeated claims never mint a second key or replay a secret. A lost response requires checking the authorization list; if claimed, request a replacement. Secrets are never returned to another member’s administrator.

## Path parameters

- `intentId` string, uuid, required

## Headers

- `X-Org-Id` string, uuid, required

## Request body

- object

## Response `201`

Committed key; raw secret returned once

- MemberKeyClaimed
  - `org_id` string, uuid, required
  - `issuer_user_id` string, uuid, required
  - `actor_user_id` string, uuid, required
  - `claimed` true, required
  - `idempotent` false, required
  - `intent_id` string, uuid, required
  - `key_id` string, uuid, required
  - `rotation_receipt_id` string, uuid, required
  - `principal_version` 1, required
  - `principal_kind` 'human', required
  - `key` string, required: One-time private secret. Do not log or cache.
  - `warning` string, required

## Other responses

- `400`: Invalid request, workspace selector, or cursor
- `401`: Verified user session required; API keys cannot authorize or claim human credentials
- `403`: Inactive user, missing membership, insufficient administrator authority, or wrong claimant
- `404`: Authorization not found in this workspace
- `409`: Authorization expired/unavailable, or already claimed. member_key_secret_unavailable includes a secret-free receipt; authorize a replacement if the one-time secret was lost.
- `429`: Key creation budget reached; inspect Retry-After before another attempt
- `503`: Authority or persistence unavailable; no success or secret delivery is asserted. Refresh intent status before retrying.

---

[API](https://skmtc.dev/arkova/apis/arkova-verification-api.md) · [All operations](https://skmtc.dev/arkova/apis/arkova-verification-api/llms.txt) · [OpenAPI document](https://skmtc.dev/arkova/apis/arkova-verification-api/revisions/a14858d1efd4?raw)