Settings

Get HITL master-key salt

Returns the user-level KDF salt for deriving the HITL master key in the browser (device-independent). JWT session only — the master password is a browser concept and SDK/MCP callers never hold it. Returns null until the user sets a master password.

get/api/v1/me/master-key

Request

  • Base URL: https://api.proof.holdings
  • URL: https://api.proof.holdings/api/v1/me/master-key
  • Auth: API key in cookie auth_token

Response

HITL master-key salt

master_kdf_saltstring nullable required

User-level KDF salt (base64url) for deriving the HITL master key in the browser; null until the user sets a master password

backup_kdf_saltstring nullable required

User-level recovery (backup) KDF salt (base64url) for deriving the backup key; null until the user sets up account recovery

Example response

{
  "master_kdf_salt": "c2FsdF92YWx1ZQ",
  "backup_kdf_salt": "YmFja3Vwc2FsdA"
}

Changes

No recorded changes to this operation across all 1 revision of this API.