---
title: "Create policy-gated wallet-key raw signature"
method: POST
path: "/kms/raw-sign"
tags: ["WalletUnitKeySigning"]
---

# Create policy-gated wallet-key raw signature

`POST /kms/raw-sign`

Signs raw input with a Wallet Unit key after lifecycle, account status,
key-reference policy, and activation-decision checks. The activation
decision must be accepted, unexpired, unconsumed, and bound to the
exact operation type, hash, nonce, and audience in this request.

## Request body

- WalletRawSignHttpRequest — unresolved $ref

## Response `200`

Signature result.

- WalletSignatureHttpResponse — unresolved $ref

## Other responses

- `400` — unresolved $ref
- `401` — unresolved $ref
- `403` — unresolved $ref
- `404` — unresolved $ref

---

[API](https://skmtc.dev/sphereon-opensource/apis/wallet-unit-api.md) · [All operations](https://skmtc.dev/sphereon-opensource/apis/wallet-unit-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/sphereon-opensource/wallet-unit-api/revisions/a9ffec140ea7/schema)