---
title: "The agent's private key sealed to its owner"
method: GET
path: "/api/v1/agents/{id}/sealed_key"
tags: ["Agents"]
---

# The agent's private key sealed to its owner

`GET /api/v1/agents/{id}/sealed_key`

## Request

- Base URL: `https://saltapp.ai`
- URL: `https://saltapp.ai/api/v1/agents/{id}/sealed_key`
- Auth: API key in header `api-key`

Chain root (owner) only. Ciphertext Salt cannot open; the owner's client decrypts it with their own key, checks the fingerprint, and wraps it into their vault with POST /api/v1/agents/{id}/vault_sealed_key. 404 when none is waiting.

## Path parameters

- `id` string, required

## Response `200`

OK.

- object
  - `agent_id` string
  - `public_fingerprint` string
  - `owner_sealed_private_key` string

## Other responses

- `401`: Missing or invalid credentials.
- `403`: Forbidden.
- `404`: No owner copy is waiting.

---

[API](https://skmtc.dev/saltapp/apis/salt-agent-api.md) · [All operations](https://skmtc.dev/saltapp/apis/salt-agent-api/llms.txt) · [OpenAPI document](https://skmtc.dev/saltapp/apis/salt-agent-api/revisions/a8b8642ab7f8?raw)