Call the global wallet RPC bridge
Read-only eth_accounts/eth_chainId are allowed by active consent. personal_sign, eth_signTypedData_v4, and eth_sendTransaction fail closed unless explicitly enabled by server flags, recent MFA, matching scope, selected wallet index, wallet binding, and one-time action confirmation. Contract calldata transactions are blocked until selector-aware scanning is configured.
Headers
Unix seconds, Unix milliseconds, or HTTP/ISO timestamp. Sensitive mutating routes require this or X-Steward-Request-Expires-At when request-expiry or request signatures are enforced.
Unix seconds, Unix milliseconds, or HTTP/ISO expiry time. Sensitive mutating routes require this or X-Steward-Request-Timestamp when request-expiry or request signatures are enforced.
Authorization signature for sensitive mutating routes when STEWARD_REQUIRE_AUTH_SIGNATURE=true or production enforcement is enabled. Use v1=<hmac-sha256> or p256=<signature>.
Tenant request-signing key id used to select a managed HMAC signing key. Required when signing with a managed tenant key; omit only for static or app-client signing secrets.
Required for signed sensitive requests and recommended for all sensitive mutating requests. Replays are scoped to authenticated or explicitly signed contexts.
Request body
Response
JSON response
Changes
Changed in 1 of the 9 revisions of this API.1
- ○
endpoint added
endpoint-added
This revision also has 6 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog
- ○