Wallets

Submit encrypted authenticated user-wallet key import

Consumes a one-time user-wallet import session bound to the authenticated user, personal tenant, walletIndex, and app client when present. Plaintext privateKey fields are rejected; audit and webhook metadata record only chain/session/address metadata.

post/v1/user/me/wallet/import/submit

Request body

importSessionIdstring required

ephemeralPublicKeystring required

Base64url DER-encoded X25519 SPKI public key generated by the client.

ivstring required

Base64url AES-GCM nonce, 12 bytes before encoding.

ciphertextstring required

Base64url encrypted private key bytes. Plaintext privateKey is rejected.

tagstring required

Base64url AES-GCM authentication tag.

walletIndexinteger

wallet_indexinteger

Response

JSON response

oktrue required

Changes

Changed in 1 of the 9 revisions of this API.1

Aug 17, 2026261a7c8070b21See the full diff
- ○
  endpoint added
  endpoint-added
This revision also has 6 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

Full history