ServerSignerClient
Defined in: account-kit/signer/src/client/server.ts:34
ServerSignerClient is a client for signing messages using an access key. It extends the BaseSignerClient and uses the ApiKeyStamper for signing. Primarily intended to be used server-side.
Extends
BaseSignerClient
<undefined
>
Constructors
Constructor
1 new ServerSignerClient(params): ServerSignerClient;
Defined in: account-kit/signer/src/client/server.ts:43
Creates an instance of ServerSignerClient.
Parameters
Parameter | Type | Description |
---|---|---|
|
| The parameters for the client, including the access key and connection configuration |
Returns
ServerSignerClient
Overrides
Properties
Property | Type | Description |
---|---|---|
() => | ‐ | |
| ‐ | |
() => | ‐ | |
() => | ‐ | |
() => | ‐ | |
() => | ‐ | |
() => | Initializes the session stamper and returns its public key. | |
() => | Unimplemented functions for server signer. Required to extend the BaseSignerClient class. | |
() => | ‐ | |
| ‐ | |
() => | ‐ | |
() => | ‐ | |
| ‐ | |
() => | ‐ | |
() => | ‐ | |
() => | ‐ | |
| ‐ |
Accessors
user
Get Signature
1 get protected user(): undefined | User;
Defined in: account-kit/signer/src/client/base.ts:129
Returns
undefined
| User
Set Signature
1 set protected user(user): void;
Defined in: account-kit/signer/src/client/base.ts:133
Parameters
Parameter | Type |
---|---|
|
|
Returns
void
Inherited from
Methods
addMfa()
1 addMfa(params): Promise<AddMfaResult>;
Defined in: account-kit/signer/src/client/base.ts:1156
Initiates the setup of a new MFA factor for the current user. Mfa will need to be verified before it is active.
Parameters
Parameter | Type | Description |
---|---|---|
| The parameters required to enable a new MFA factor |
Returns
Promise
<AddMfaResult
>
A promise that resolves to the factor setup information
Throws
If no user is authenticated
Throws
If an unsupported factor type is provided
Inherited from
addOauthProvider()
1 addOauthProvider(params): Promise<OauthProviderInfo>;
Defined in: account-kit/signer/src/client/base.ts:598
Adds an OAuth provider for the authenticated user using the provided parameters. Throws an error if the user is not authenticated.
Parameters
Parameter | Type | Description |
---|---|---|
| The parameters for adding an OAuth provider, including |
Returns
Promise
<OauthProviderInfo
>
A Promise that resolves when the OAuth provider is added.
Throws
Throws if the user is not authenticated.
Inherited from
BaseSignerClient
.addOauthProvider
addPasskey()
1 addPasskey(options): Promise<string[]>;
Defined in: account-kit/signer/src/client/base.ts:491
Handles the creation of authenticators using WebAuthn attestation and the provided options. Requires the user to be authenticated.
Parameters
Parameter | Type | Description |
---|---|---|
|
| The options used to create the WebAuthn attestation |
Returns
Promise
<string
[]>
A promise that resolves to an array of authenticator IDs
Throws
If the user is not authenticated
Inherited from
authenticateWithAccessKey()
1 authenticateWithAccessKey(params): Promise<User>;
Defined in: account-kit/signer/src/client/server.ts:86
Authenticates the user with an access key.
Parameters
Parameter | Type | Description |
---|---|---|
|
| The parameters for the authentication |
Returns
Promise
<User
>
A promise that resolves to the user
createAccount()
1 createAccount(params): Promise<SignupResponse>;
Defined in: account-kit/signer/src/client/server.ts:63
Creates a new user with the given parameters.
Parameters
Parameter | Type | Description |
---|---|---|
|
| The parameters for creating the account |
Returns
Promise
<SignupResponse
>
A promise that resolves to the signup response
Overrides
BaseSignerClient
.createAccount
disconnect()
1 disconnect(): Promise<void>;
Defined in: account-kit/signer/src/client/server.ts:53
Unsets the user for the client
Returns
Promise
<void
>
Overrides
experimental_addToMultiOwner()
1 experimental_addToMultiOwner(orgId, members): Promise<void>;
Defined in: account-kit/signer/src/client/base.ts:1001
This will add additional members to an existing multi-sig account
Parameters
Parameter | Type | Description |
---|---|---|
|
| orgId of the multi-sig to add members to |
|
| the addresses of the members to add |
Returns
Promise
<void
>
Inherited from
BaseSignerClient
.experimental_addToMultiOwner
experimental_createApiKey()
1 experimental_createApiKey(params): Promise<void>;
Defined in: account-kit/signer/src/client/base.ts:764
Creates an API key that can take any action on behalf of the current user. (Note that this method is currently experimental and is subject to change.)
Parameters
Parameter | Type | Description |
---|---|---|
| Parameters for creating the API key. |
Returns
Promise
<void
>
Throws
If there is no authenticated user or the API key creation fails.
Inherited from
BaseSignerClient
.experimental_createApiKey
experimental_createMultiOwner()
1 experimental_createMultiOwner(additionalMembers): Promise<{ 2 evmSignerAddress: `0x${string}`; 3 members: object[]; 4 orgId: string; 5 }>;
Defined in: account-kit/signer/src/client/base.ts:979
This will create a multi-owner account with the current user and additional specified signers
Parameters
Parameter | Type | Description |
---|---|---|
|
| members to add, aside from the currently authenticated user |
Returns
Promise
<{
evmSignerAddress
: `0x${string}`
;
members
: object
[];
orgId
: string
;
}>
created multi-owner account
Inherited from
BaseSignerClient
.experimental_createMultiOwner
experimental_deleteFromMultiOwner()
1 experimental_deleteFromMultiOwner(orgId, members): Promise<void>;
Defined in: account-kit/signer/src/client/base.ts:1039
This will remove members from an existing multi-sig account
Parameters
Parameter | Type | Description |
---|---|---|
|
| orgId of the multi-sig to remove members from |
|
| the addresses of the members to remove |
Returns
Promise
<void
>
Inherited from
BaseSignerClient
.experimental_deleteFromMultiOwner
experimental_multiOwnerSignRawMessage()
1 experimental_multiOwnerSignRawMessage( 2 msg, 3 orgId, 4 orgAddress): Promise<`0x${string}`>;
Defined in: account-kit/signer/src/client/base.ts:942
This will sign on behalf of the multi-owner org, without doing any transformations on the message. For SignMessage or SignTypedData, the caller should hash the message before calling this method and pass that result here.
Parameters
Parameter | Type | Description |
---|---|---|
|
| the hex representation of the bytes to sign |
|
| orgId of the multi-owner org to sign on behalf of |
|
| address of the multi-owner org to sign on behalf of |
Returns
Promise
<`0x${string}`
>
the signature over the raw hex
Inherited from
BaseSignerClient
.experimental_multiOwnerSignRawMessage
getMfaFactors()
1 getMfaFactors(): Promise<{ 2 multiFactors: MfaFactor[]; 3 }>;
Defined in: account-kit/signer/src/client/base.ts:1124
Retrieves the list of MFA factors configured for the current user.
Returns
Promise
<{
multiFactors
: MfaFactor
[];
}>
A promise that resolves to an array of configured MFA factors
Throws
If no user is authenticated
Inherited from
BaseSignerClient
.getMfaFactors
getOauthNonce()
1 protected getOauthNonce(turnkeyPublicKey): string;
Defined in: account-kit/signer/src/client/base.ts:1491
Turnkey requires the nonce in the id token to be in this format.
Parameters
Parameter | Type | Description |
---|---|---|
|
| key from a Turnkey iframe |
Returns
string
nonce to be used in OIDC
Inherited from
BaseSignerClient
.getOauthNonce
getOauthProviderUrl()
1 protected getOauthProviderUrl(args): Promise<string>;
Defined in: account-kit/signer/src/client/base.ts:1316
Returns the authentication url for the selected OAuth Proivder
Example
1 cosnt oauthParams = { 2 authProviderId: "google", 3 isCustomProvider: false, 4 auth0Connection: undefined, 5 scope: undefined, 6 claims: undefined, 7 mode: "redirect", 8 redirectUrl: "https://your-url-path/oauth-return", 9 expirationSeconds: 3000 10 }; 11 12 const turnkeyPublicKey = await this.initIframeStamper(); 13 const oauthCallbackUrl = this.oauthCallbackUrl; 14 const oauthConfig = this.getOauthConfig() // Optional value for OauthConfig() 15 const usesRelativeUrl = true // Optional value to determine if we use a relative (or absolute) url for the `redirect_url` 16 17 const oauthProviderUrl = getOauthProviderUrl({ 18 oauthParams, 19 turnkeyPublicKey, 20 oauthCallbackUrl 21 })
Parameters
Parameter | Type | Description |
---|---|---|
| Required. The Oauth provider’s auth parameters |
Returns
Promise
<string
>
returns the Oauth provider’s url
Inherited from
BaseSignerClient
.getOauthProviderUrl
getPasskeyStatus()
1 getPasskeyStatus(): Promise<{ 2 isPasskeyAdded: boolean; 3 }>;
Defined in: account-kit/signer/src/client/base.ts:576
Retrieves the status of the passkey for the current user. Requires the user to be authenticated.
Returns
Promise
<{
isPasskeyAdded
: boolean
;
}>
A promise that resolves to an object containing the passkey status
Throws
If the user is not authenticated
Inherited from
BaseSignerClient
.getPasskeyStatus
getUser()
1 getUser(): null | User;
Defined in: account-kit/signer/src/client/base.ts:1074
Returns the current user or null if no user is set.
Returns
null
| User
the current user object or null if no user is available
Inherited from
initOauth()
1 initOauth(): Promise<OauthConfig>;
Defined in: account-kit/signer/src/client/base.ts:124
Asynchronously fetches and sets the OAuth configuration.
Returns
Promise
<OauthConfig
>
A promise that resolves to the OAuth configuration
Inherited from
initOtp()
1 initOtp(type, contact): Promise<{ 2 otpId: string; 3 }>;
Defined in: account-kit/signer/src/client/base.ts:474
Initiates an OTP (One-Time Password) verification process for a user contact.
Parameters
Parameter | Type | Description |
---|---|---|
|
| The type of OTP to send, either “email” or “sms” |
|
| The email address or phone number to send the OTP to |
Returns
Promise
<{
otpId
: string
;
}>
A promise that resolves to an object containing the OTP ID
Throws
When no user is currently authenticated
Inherited from
listAuthMethods()
1 listAuthMethods(): Promise<AuthMethods>;
Defined in: account-kit/signer/src/client/base.ts:648
Retrieves the list of authentication methods for the current user.
Returns
Promise
<AuthMethods
>
A promise that resolves to the list of authentication methods
Throws
If the user is not authenticated
Inherited from
BaseSignerClient
.listAuthMethods
lookupUserByAccessKey()
1 lookupUserByAccessKey(params): Promise<{ 2 orgId: null | string; 3 }>;
Defined in: account-kit/signer/src/client/base.ts:817
Looks up information based on an access key.
Parameters
Parameter | Type | Description |
---|---|---|
|
| The access key parameters |
Returns
Promise
<{
orgId
: null
| string
;
}>
The result of the lookup request
Inherited from
BaseSignerClient
.lookupUserByAccessKey
lookupUserByEmail()
1 lookupUserByEmail(email): Promise<{ 2 orgId: null | string; 3 }>;
Defined in: account-kit/signer/src/client/base.ts:797
Looks up information based on an email address.
Parameters
Parameter | Type | Description |
---|---|---|
|
| the email address to look up |
Returns
Promise
<{
orgId
: null
| string
;
}>
the result of the lookup request
Inherited from
BaseSignerClient
.lookupUserByEmail
lookupUserByPhone()
1 lookupUserByPhone(phone): Promise<{ 2 orgId: null | string; 3 }>;
Defined in: account-kit/signer/src/client/base.ts:807
Looks up information based on a phone number.
Parameters
Parameter | Type | Description |
---|---|---|
|
| the phone number to look up |
Returns
Promise
<{
orgId
: null
| string
;
}>
the result of the lookup request
Inherited from
BaseSignerClient
.lookupUserByPhone
lookupUserWithPasskey()
1 lookupUserWithPasskey(user?): Promise<User>;
Defined in: account-kit/signer/src/client/base.ts:554
Asynchronously handles the authentication process using WebAuthn Stamper. If a user is provided, sets the user and returns it. Otherwise, retrieves the current user and initializes the WebAuthn stamper.
Parameters
Parameter | Type | Default value | Description |
---|---|---|---|
|
| An optional user object to authenticate |
Returns
Promise
<User
>
A promise that resolves to the authenticated user object
Inherited from
BaseSignerClient
.lookupUserWithPasskey
on()
1 on<E>(event, listener): () => any;
Defined in: account-kit/signer/src/client/base.ts:296
Listen to events emitted by the client
Type Parameters
Type Parameter |
---|
|
Parameters
Parameter | Type | Description |
---|---|---|
|
| the event you want to listen to |
| the callback function to execute when an event is fired |
Returns
a function that will remove the listener when called
1 (): any;
Returns
any
Inherited from
pollActivityCompletion()
1 protected pollActivityCompletion<T>( 2 activity, 3 organizationId, 4 resultKey): Promise<NonNullable<object[T]>>;
Defined in: account-kit/signer/src/client/base.ts:1436
Type Parameters
Type Parameter |
---|
|
Parameters
Parameter | Type | Description |
---|---|---|
| { | ‐ |
|
| ‐ |
|
| ‐ |
| { | ‐ |
|
| ‐ |
|
| ‐ |
| { | Description Failure reason of the intended action. |
|
| Format: int32 |
|
| ‐ |
|
| ‐ |
|
| Description An artifact verifying a User’s action. |
|
| Description Unique identifier for a given Activity object. |
| { | Description Intent object crafted by Turnkey based on the user request, used to assess the permissibility of an action. |
| { | ‐ |
| { | Description WebAuthN hardware devices that can be used to log in to the Turnkey web app. |
| { | ‐ |
|
| |
| { | ‐ |
|
| ‐ |
|
| ‐ |
| { | ‐ |
|
| ‐ |
|
| ‐ |
|
| ‐ |
| { | ‐ |
|
| ‐ |
|
| |
|
| ‐ |
| ( | | ‐ |
|
| |
|
| Description Human-readable name for an Authenticator. |
|
| Description Challenge presented for authentication purposes. |
|
| Description Unique identifier for a given User. |
|
| Description Unique identifier for a given Invitation object. |
|
| Description Unique identifier for a given User. |
| { | ‐ |
| { | Description WebAuthN hardware devices that can be used to log in to the Turnkey web app. |
| { | Description The attestation that proves custody of the authenticator and provides metadata about it. |
|
| Description A base64 url encoded payload containing authenticator data and any attestation the webauthn provider chooses. |
|
| Description A base64 url encoded payload containing metadata about the signing context and the challenge. |
|
| Description The cbor encoded then base64 url encoded id of the credential. |
| ( | | Description The type of authenticator transports. |
|
| Description Human-readable name for an Authenticator. |
|
| Description Challenge presented for authentication purposes. |
|
| Description Unique identifier for a given Invitation object. |
|
| Description Unique identifier for a given User. |
| { | ‐ |
|
| Description The product that the customer wants to subscribe to. |
| { | ‐ |
|
| Description An artifact verifying a User’s action. |
| { | ‐ |
|
| Description A list of API Keys. |
|
| Description Unique identifier for a given User. |
| { | ‐ |
|
| Description A list of API Keys. |
|
| Description Unique identifier for a given User. |
| { | ‐ |
|
| Description A list of API-only Users to create. |
| { | ‐ |
|
| Description A list of Authenticators. |
|
| Description Unique identifier for a given User. |
| { | ‐ |
|
| Description A list of Authenticators. |
|
| Description Unique identifier for a given User. |
| { | ‐ |
|
| Description A list of Invitations. |
| { | ‐ |
|
| Description The Client ID issued by the OAuth 2.0 provider |
|
| Description The client secret issued by the OAuth 2.0 provider encrypted to the TLS Fetcher quorum key |
|
| Description The OAuth 2.0 provider |
| { | ‐ |
|
| Description A list of Oauth providers. |
|
| Description The ID of the User to add an Oauth provider to |
| { | ‐ |
|
| Description Human-readable name for an Organization. |
| { | Description The root user’s Authenticator. |
| { | ‐ |
|
| |
| { | ‐ |
|
| ‐ |
|
| ‐ |
| { | ‐ |
|
| ‐ |
|
| ‐ |
|
| ‐ |
| { | ‐ |
|
| ‐ |
|
| |
|
| ‐ |
| ( | | ‐ |
|
| |
|
| Description Human-readable name for an Authenticator. |
|
| Description Challenge presented for authentication purposes. |
|
| Description Unique identifier for a given User. |
|
| Description The root user’s email address. |
|
| Description Unique identifier for the root user object. |
| { | ‐ |
|
| Description Human-readable name for an Organization. |
| { | Description The root user’s Authenticator. |
| { | Description The attestation that proves custody of the authenticator and provides metadata about it. |
|
| Description A base64 url encoded payload containing authenticator data and any attestation the webauthn provider chooses. |
|
| Description A base64 url encoded payload containing metadata about the signing context and the challenge. |
|
| Description The cbor encoded then base64 url encoded id of the credential. |
| ( | | Description The type of authenticator transports. |
|
| Description Human-readable name for an Authenticator. |
|
| Description Challenge presented for authentication purposes. |
|
| Description The root user’s email address. |
|
| Description Unique identifier for the root user object. |
| { | ‐ |
|
| Description An array of policy intents to be created. |
| { | ‐ |
|
| Description The instruction to DENY or ALLOW a particular activity following policy selector(s). |
|
| ‐ |
|
| Description Human-readable name for a Policy. |
|
| Description A list of simple functions each including a subject, target and boolean. See Policy Engine Language section for additional details. |
| { | ‐ |
|
| Description Whether to ALLOW or DENY requests that match the condition and consensus requirements. |
|
| ‐ |
|
| Description Human-readable name for a Policy. |
|
| Description A list of simple functions each including a subject, target and boolean. See Policy Engine Language section for additional details. |
| { | ‐ |
|
| Description The condition expression that triggers the Effect |
|
| Description The consensus expression that triggers the Effect |
|
| Description The instruction to DENY or ALLOW an activity. |
|
| ‐ |
|
| Description Human-readable name for a Policy. |
| { | ‐ |
|
| Description A list of Private Keys. |
| { | ‐ |
|
| Description A list of Private Keys. |
| { | ‐ |
|
| Description A list of Private Key IDs. |
|
| Description Human-readable name for a Private Key Tag. |
| { [ | ‐ |
| { | ‐ |
|
| Description Optional human-readable name for an API Key. If none provided, default to Read Write Session - <Timestamp> |
|
| Description Email of the user to create a read write session for |
|
| Description Expiration window (in seconds) indicating how long the API key is valid for. If not provided, a default of 15 minutes will be used. |
|
| Description Client-side public key generated by the user, to which the read write session bundle (credentials) will be encrypted. |
| { | ‐ |
|
| Description Optional human-readable name for an API Key. If none provided, default to Read Write Session - <Timestamp> |
|
| Description Expiration window (in seconds) indicating how long the API key is valid for. If not provided, a default of 15 minutes will be used. |
|
| Description Invalidate all other previously generated ReadWriteSession API keys |
|
| Description Client-side public key generated by the user, to which the read write session bundle (credentials) will be encrypted. |
|
| Description Unique identifier for a given User. |
| { | ‐ |
|
| Description Human-readable name for a Smart Contract Interface. |
|
| Description Notes for a Smart Contract Interface. |
|
| Description Corresponding contract address or program ID |
|
| Description ABI/IDL as a JSON string |
| | | ‐ |
| { | ‐ |
|
| Description Name for this sub-organization |
| { | Description Root User authenticator for this new sub-organization |
| { | Description The attestation that proves custody of the authenticator and provides metadata about it. |
|
| Description A base64 url encoded payload containing authenticator data and any attestation the webauthn provider chooses. |
|
| Description A base64 url encoded payload containing metadata about the signing context and the challenge. |
|
| Description The cbor encoded then base64 url encoded id of the credential. |
| ( | | Description The type of authenticator transports. |
|
| Description Human-readable name for an Authenticator. |
|
| Description Challenge presented for authentication purposes. |
| { | ‐ |
|
| Format: int32 Description The threshold of unique approvals to reach root quorum. This value must be less than or equal to the number of root users |
|
| Description Root users to create within this sub-organization |
|
| Description Name for this sub-organization |
| { | ‐ |
|
| Description A list of Private Keys. |
|
| Format: int32 Description The threshold of unique approvals to reach root quorum. This value must be less than or equal to the number of root users |
|
| Description Root users to create within this sub-organization |
|
| Description Name for this sub-organization |
| { | ‐ |
|
| Description Disable email auth for the sub-organization |
|
| Description Disable email recovery for the sub-organization |
|
| Format: int32 Description The threshold of unique approvals to reach root quorum. This value must be less than or equal to the number of root users |
|
| Description Root users to create within this sub-organization |
|
| Description Name for this sub-organization |
| { | Description The wallet to create for the sub-organization |
|
| Description A list of wallet Accounts. This field, if not needed, should be an empty array in your request body. |
|
| Format: int32 Description Length of mnemonic to generate the Wallet seed. Defaults to 12. Accepted values: 12, 15, 18, 21, 24. |
|
| Description Human-readable name for a Wallet. |
| { | ‐ |
|
| Description Disable email auth for the sub-organization |
|
| Description Disable email recovery for the sub-organization |
|
| Format: int32 Description The threshold of unique approvals to reach root quorum. This value must be less than or equal to the number of root users |
|
| Description Root users to create within this sub-organization |
|
| Description Name for this sub-organization |
| { | Description The wallet to create for the sub-organization |
|
| Description A list of wallet Accounts. This field, if not needed, should be an empty array in your request body. |
|
| Format: int32 Description Length of mnemonic to generate the Wallet seed. Defaults to 12. Accepted values: 12, 15, 18, 21, 24. |
|
| Description Human-readable name for a Wallet. |
| { | ‐ |
|
| Description Disable email auth for the sub-organization |
|
| Description Disable email recovery for the sub-organization |
|
| Format: int32 Description The threshold of unique approvals to reach root quorum. This value must be less than or equal to the number of root users |
|
| Description Root users to create within this sub-organization |
|
| Description Name for this sub-organization |
| { | Description The wallet to create for the sub-organization |
|
| Description A list of wallet Accounts. This field, if not needed, should be an empty array in your request body. |
|
| Format: int32 Description Length of mnemonic to generate the Wallet seed. Defaults to 12. Accepted values: 12, 15, 18, 21, 24. |
|
| Description Human-readable name for a Wallet. |
| { | ‐ |
|
| Description Disable email auth for the sub-organization |
|
| Description Disable email recovery for the sub-organization |
|
| Description Disable OTP email auth for the sub-organization |
|
| Description Disable OTP SMS auth for the sub-organization |
|
| Format: int32 Description The threshold of unique approvals to reach root quorum. This value must be less than or equal to the number of root users |
|
| Description Root users to create within this sub-organization |
|
| Description Name for this sub-organization |
|
| Description Signed JWT containing a unique id, expiry, verification type, contact |
| { | Description The wallet to create for the sub-organization |
|
| Description A list of wallet Accounts. This field, if not needed, should be an empty array in your request body. |
|
| Format: int32 Description Length of mnemonic to generate the Wallet seed. Defaults to 12. Accepted values: 12, 15, 18, 21, 24. |
|
| Description Human-readable name for a Wallet. |
| { | ‐ |
|
| Description A list of Users. |
| { | ‐ |
|
| Description A list of Users. |
| { | ‐ |
|
| Description A list of Users. |
| { | ‐ |
|
| Description A list of User IDs. |
|
| Description Human-readable name for a User Tag. |
| { | ‐ |
|
| Description A list of wallet Accounts. |
|
| Description Unique identifier for a given Wallet. |
| { | ‐ |
|
| Description A list of wallet Accounts. This field, if not needed, should be an empty array in your request body. |
|
| Format: int32 Description Length of mnemonic to generate the Wallet seed. Defaults to 12. Accepted values: 12, 15, 18, 21, 24. |
|
| Description Human-readable name for a Wallet. |
| { | ‐ |
|
| Description A list of API Key IDs. |
|
| Description Unique identifier for a given User. |
| { | ‐ |
|
| Description A list of Authenticator IDs. |
|
| Description Unique identifier for a given User. |
| { | ‐ |
|
| Description Unique identifier for a given Invitation object. |
| { | ‐ |
|
| Description The ID of the OAuth 2.0 credential to delete |
| { | ‐ |
|
| Description Unique identifier for a given Provider. |
|
| Description The ID of the User to remove an Oauth provider from |
| { | ‐ |
|
| Description Unique identifier for a given Organization. |
| { | ‐ |
|
| Description The payment method that the customer wants to remove. |
| { | ‐ |
|
| Description Unique identifier for a given Policy. |
| { | ‐ |
|
| Description Optional parameter for deleting the private keys, even if any have not been previously exported. If they have been exported, this field is ignored. |
|
| Description List of unique identifiers for private keys within an organization |
| { | ‐ |
|
| Description A list of Private Key Tag IDs. |
| { | ‐ |
|
| Description The ID of a Smart Contract Interface intended for deletion. |
| { | ‐ |
|
| Description Sub-organization deletion, by default, requires associated wallets and private keys to be exported for security reasons. Set this boolean to true to force sub-organization deletion even if some wallets or private keys within it have not been exported yet. Default: false. |
| { | ‐ |
|
| Description A list of User IDs. |
| { | ‐ |
|
| Description A list of User Tag IDs. |
| { | ‐ |
|
| Description Optional parameter for deleting the wallets, even if any have not been previously exported. If they have been exported, this field is ignored. |
|
| Description List of unique identifiers for wallets within an organization |
| { [ | ‐ |
| { | ‐ |
|
| Description Unique identifier for a given Private Key. |
| { | ‐ |
|
| Description Optional human-readable name for an API Key. If none provided, default to Email Auth - <Timestamp> |
|
| Description Email of the authenticating user. |
| { | Description Optional parameters for customizing emails. If not provided, the default email will be used. |
|
| Description The name of the application. |
|
| Description A URL pointing to a logo in PNG format. Note this logo will be resized to fit into 340px x 124px. |
|
| Description A template for the URL to be used in a magic link button, e.g. |
|
| Description Unique identifier for a given Email Template. If not specified, the default is the most recent Email Template. |
|
| Description JSON object containing key/value pairs to be used with custom templates. |
|
| Description Expiration window (in seconds) indicating how long the API key is valid for. If not provided, a default of 15 minutes will be used. |
|
| Description Invalidate all other previously generated Email Auth API keys |
|
| Description Optional custom email address to use as reply-to |
|
| Description Optional custom email address from which to send the email |
|
| Description Optional custom sender name for use with sendFromEmailAddress; if left empty, will default to ‘Notifications’ |
|
| Description Client-side public key generated by the user, to which the email auth bundle (credentials) will be encrypted. |
| { | ‐ |
|
| Description Optional human-readable name for an API Key. If none provided, default to Email Auth - <Timestamp> |
|
| Description Email of the authenticating user. |
| { | Description Optional parameters for customizing emails. If not provided, the default email will be used. |
|
| Description The name of the application. |
|
| Description A URL pointing to a logo in PNG format. Note this logo will be resized to fit into 340px x 124px. |
|
| Description A template for the URL to be used in a magic link button, e.g. |
|
| Description Unique identifier for a given Email Template. If not specified, the default is the most recent Email Template. |
|
| Description JSON object containing key/value pairs to be used with custom templates. |
|
| Description Expiration window (in seconds) indicating how long the API key is valid for. If not provided, a default of 15 minutes will be used. |
|
| Description Invalidate all other previously generated Email Auth API keys |
|
| Description Optional custom email address to use as reply-to |
|
| Description Optional custom email address from which to send the email |
|
| Description Optional custom sender name for use with sendFromEmailAddress; if left empty, will default to ‘Notifications’ |
|
| Description Client-side public key generated by the user, to which the email auth bundle (credentials) will be encrypted. |
| { [ | ‐ |
| { | ‐ |
|
| Description Unique identifier for a given Private Key. |
|
| Description Client-side public key generated by the user, to which the export bundle will be encrypted. |
| { | ‐ |
|
| Description Address to identify Wallet Account. |
|
| Description Client-side public key generated by the user, to which the export bundle will be encrypted. |
| { | ‐ |
| | | Description The language of the mnemonic to export. Defaults to English. |
|
| Description Client-side public key generated by the user, to which the export bundle will be encrypted. |
|
| Description Unique identifier for a given Wallet. |
| { | ‐ |
| ( | | Description Cryptocurrency-specific formats for a derived address (e.g., Ethereum). |
|
| Description Cryptographic Curve used to generate a given Private Key. |
|
| Description Bundle containing a raw private key encrypted to the enclave’s target public key. |
|
| Description Human-readable name for a Private Key. |
|
| Description The ID of the User importing a Private Key. |
| { | ‐ |
|
| Description A list of wallet Accounts. |
|
| Description Bundle containing a wallet mnemonic encrypted to the enclave’s target public key. |
|
| Description The ID of the User importing a Wallet. |
|
| Description Human-readable name for a Wallet. |
| { | ‐ |
|
| Description ISO 3166-1 two-digit country code for Coinbase representing the purchasing user’s country of residence, e.g., US, GB. |
|
| Description ISO 3166-2 two-digit country subdivision code for Coinbase representing the purchasing user’s subdivision of residence within their country, e.g. NY. Required if country_code=US. |
| | | Description Code for the cryptocurrency to be purchased, e.g., btc, eth. Maps to MoonPay’s currencyCode or Coinbase’s defaultAsset. |
|
| Description Specifies a preset fiat amount for the transaction, e.g., ‘100’. Must be greater than ‘20’. If not provided, the user will be prompted to enter an amount. |
| | | Description Code for the fiat currency to be used in the transaction, e.g., USD, EUR. |
| | | Description Blockchain network to be used for the transaction, e.g., bitcoin, ethereum. Maps to MoonPay’s network or Coinbase’s defaultNetwork. |
|
| Description Enum to specifiy which on-ramp provider to use |
| | | Description Pre-selected payment method, e.g., CREDIT_DEBIT_CARD, APPLE_PAY. Validated against the chosen provider. |
|
| Description Optional flag to indicate whether to use the sandbox mode to simulate transactions for the on-ramp provider. Default is false. |
|
| Description Destination wallet address for the buy transaction. |
| { | ‐ |
|
| Description The ID of the User importing a Private Key. |
| { | ‐ |
|
| Description The ID of the User importing a Wallet. |
| { | ‐ |
|
| Description Email or phone number to send the OTP code to |
| { | Description Optional parameters for customizing emails. If not provided, the default email will be used. |
|
| Description The name of the application. |
|
| Description A URL pointing to a logo in PNG format. Note this logo will be resized to fit into 340px x 124px. |
|
| Description A template for the URL to be used in a magic link button, e.g. |
|
| Description Unique identifier for a given Email Template. If not specified, the default is the most recent Email Template. |
|
| Description JSON object containing key/value pairs to be used with custom templates. |
|
| Description Enum to specifiy whether to send OTP via SMS or email |
|
| Description Optional custom email address to use as reply-to |
|
| Description Optional custom email address from which to send the OTP email |
|
| Description Optional custom sender name for use with sendFromEmailAddress; if left empty, will default to ‘Notifications’ |
| { | Description Optional parameters for customizing SMS message. If not provided, the default sms message will be used. |
|
| Description Template containing references to .OtpCode i.e Your OTP is {{.OtpCode}} |
|
| Description Optional client-generated user identifier to enable per-user rate limiting for SMS auth. We recommend using a hash of the client-side IP address. |
| { | ‐ |
|
| Description Optional flag to specify if the OTP code should be alphanumeric (Crockford’s Base32). Default = true |
|
| Description Email or phone number to send the OTP code to |
| { | Description Optional parameters for customizing emails. If not provided, the default email will be used. |
|
| Description The name of the application. |
|
| Description A URL pointing to a logo in PNG format. Note this logo will be resized to fit into 340px x 124px. |
|
| Description A template for the URL to be used in a magic link button, e.g. |
|
| Description Unique identifier for a given Email Template. If not specified, the default is the most recent Email Template. |
|
| Description JSON object containing key/value pairs to be used with custom templates. |
|
| Format: int32 Description Optional length of the OTP code. Default = 9 |
|
| Description Enum to specifiy whether to send OTP via SMS or email |
|
| Description Optional custom email address to use as reply-to |
|
| Description Optional custom email address from which to send the OTP email |
|
| Description Optional custom sender name for use with sendFromEmailAddress; if left empty, will default to ‘Notifications’ |
| { | Description Optional parameters for customizing SMS message. If not provided, the default sms message will be used. |
|
| Description Template containing references to .OtpCode i.e Your OTP is {{.OtpCode}} |
|
| Description Optional client-generated user identifier to enable per-user rate limiting for SMS auth. We recommend using a hash of the client-side IP address. |
| { | ‐ |
|
| Description Optional flag to specify if the OTP code should be alphanumeric (Crockford’s Base32). Default = true |
|
| Description Email or phone number to send the OTP code to |
| { | Description Optional parameters for customizing emails. If not provided, the default email will be used. |
|
| Description The name of the application. |
|
| Description A URL pointing to a logo in PNG format. Note this logo will be resized to fit into 340px x 124px. |
|
| Description A template for the URL to be used in a magic link button, e.g. |
|
| Description Unique identifier for a given Email Template. If not specified, the default is the most recent Email Template. |
|
| Description JSON object containing key/value pairs to be used with custom templates. |
|
| Description Expiration window (in seconds) indicating how long the OTP is valid for. If not provided, a default of 5 minutes will be used. Maximum value is 600 seconds (10 minutes) |
|
| Format: int32 Description Optional length of the OTP code. Default = 9 |
|
| Description Whether to send OTP via SMS or email. Possible values: OTP_TYPE_SMS, OTP_TYPE_EMAIL |
|
| Description Optional custom email address to use as reply-to |
|
| Description Optional custom email address from which to send the OTP email |
|
| Description Optional custom sender name for use with sendFromEmailAddress; if left empty, will default to ‘Notifications’ |
| { | Description Optional parameters for customizing SMS message. If not provided, the default sms message will be used. |
|
| Description Template containing references to .OtpCode i.e Your OTP is {{.OtpCode}} |
|
| Description Optional client-generated user identifier to enable per-user rate limiting for SMS auth. We recommend using a hash of the client-side IP address. |
| { | ‐ |
|
| Description Email of the user starting recovery |
| { | Description Optional parameters for customizing emails. If not provided, the default email will be used. |
|
| Description The name of the application. |
|
| Description A URL pointing to a logo in PNG format. Note this logo will be resized to fit into 340px x 124px. |
|
| Description A template for the URL to be used in a magic link button, e.g. |
|
| Description Unique identifier for a given Email Template. If not specified, the default is the most recent Email Template. |
|
| Description JSON object containing key/value pairs to be used with custom templates. |
|
| Description Expiration window (in seconds) indicating how long the recovery credential is valid for. If not provided, a default of 15 minutes will be used. |
|
| Description Client-side public key generated by the user, to which the recovery bundle will be encrypted. |
| { | ‐ |
|
| Description The auth_code provided by the OAuth 2.0 provider to the end user to be exchanged for a Bearer token in the OAuth 2.0 flow |
|
| Description The code verifier used by OAuth 2.0 PKCE providers |
|
| Description An optional nonce used by the client to prevent replay/substitution of an ID token |
|
| Description The OAuth 2.0 credential id whose client_id and client_secret will be used in the OAuth 2.0 flow |
|
| Description The URI the user is redirected to after they have authenticated with the OAuth 2.0 provider |
| { | ‐ |
|
| Description Optional human-readable name for an API Key. If none provided, default to Oauth - <Timestamp> |
|
| Description Expiration window (in seconds) indicating how long the API key is valid for. If not provided, a default of 15 minutes will be used. |
|
| Description Invalidate all other previously generated Oauth API keys |
|
| Description Base64 encoded OIDC token |
|
| Description Client-side public key generated by the user, to which the oauth bundle (credentials) will be encrypted. |
| { | ‐ |
|
| Description Expiration window (in seconds) indicating how long the Session is valid for. If not provided, a default of 15 minutes will be used. |
|
| Description Invalidate all other previously generated Login API keys |
|
| Description Base64 encoded OIDC token |
|
| Description Client-side public key generated by the user, which will be conditionally added to org data based on the validity of the oidc token associated with this request |
| { | ‐ |
|
| Description Optional human-readable name for an API Key. If none provided, default to OTP Auth - <Timestamp> |
|
| Description Expiration window (in seconds) indicating how long the API key is valid for. If not provided, a default of 15 minutes will be used. |
|
| Description Invalidate all other previously generated OTP Auth API keys |
|
| Description OTP sent out to a user’s contact (email or SMS) |
|
| Description ID representing the result of an init OTP activity. |
|
| Description Client-side public key generated by the user, to which the OTP bundle (credentials) will be encrypted. |
| { | ‐ |
|
| Description Expiration window (in seconds) indicating how long the Session is valid for. If not provided, a default of 15 minutes will be used. |
|
| Description Invalidate all other previously generated Login API keys |
|
| Description Client-side public key generated by the user, which will be conditionally added to org data based on the validity of the verification token |
|
| Description Signed JWT containing a unique id, expiry, verification type, contact |
| { | ‐ |
| { | Description The new authenticator to register. |
| { | Description The attestation that proves custody of the authenticator and provides metadata about it. |
|
| Description A base64 url encoded payload containing authenticator data and any attestation the webauthn provider chooses. |
|
| Description A base64 url encoded payload containing metadata about the signing context and the challenge. |
|
| Description The cbor encoded then base64 url encoded id of the credential. |
| ( | | Description The type of authenticator transports. |
|
| Description Human-readable name for an Authenticator. |
|
| Description Challenge presented for authentication purposes. |
|
| Description Unique identifier for the user performing recovery. |
| { | ‐ |
|
| Description An artifact verifying a User’s action. |
| { | ‐ |
| | | Description Name of the feature to remove |
| { | ‐ |
| | | Description Name of the feature to set |
|
| Description Optional value for the feature. Will override existing values if feature is already set. |
| { | ‐ |
|
| Description The email that will receive invoices for the credit card. |
|
| Description The name associated with the credit card. |
|
| Description The verification digits of the customer’s credit card. |
|
| Description The month that the credit card expires. |
|
| Description The year that the credit card expires. |
|
| Description The account number of the customer’s credit card. |
| { | ‐ |
|
| Description The email that will receive invoices for the credit card. |
|
| Description The name associated with the credit card. |
|
| Description The id of the payment method that was created clientside. |
| { | ‐ |
| | | Description Encoding of the |
| | | Description Hash function to apply to payload bytes before signing. This field must be set to HASH_FUNCTION_NOT_APPLICABLE for EdDSA/ed25519 signature requests; configurable payload hashing is not supported by RFC 8032. |
|
| Description Raw unsigned payload to be signed. |
|
| Description Unique identifier for a given Private Key. |
| { | ‐ |
| | | Description Encoding of the |
| | | Description Hash function to apply to payload bytes before signing. This field must be set to HASH_FUNCTION_NOT_APPLICABLE for EdDSA/ed25519 signature requests; configurable payload hashing is not supported by RFC 8032. |
|
| Description Raw unsigned payload to be signed. |
|
| Description A Wallet account address, Private Key address, or Private Key identifier. |
| { | ‐ |
| | | Description Encoding of the |
| | | Description Hash function to apply to payload bytes before signing. This field must be set to HASH_FUNCTION_NOT_APPLICABLE for EdDSA/ed25519 signature requests; configurable payload hashing is not supported by RFC 8032. |
|
| Description An array of raw unsigned payloads to be signed. |
|
| Description A Wallet account address, Private Key address, or Private Key identifier. |
| { | ‐ |
|
| Description Unique identifier for a given Private Key. |
| | | ‐ |
|
| Description Raw unsigned transaction to be signed by a particular Private Key. |
| { | ‐ |
|
| Description A Wallet account address, Private Key address, or Private Key identifier. |
| | | ‐ |
|
| Description Raw unsigned transaction to be signed |
| { | ‐ |
|
| Description Expiration window (in seconds) indicating how long the Session is valid for. If not provided, a default of 15 minutes will be used. |
|
| Description Invalidate all other previously generated Login API keys |
|
| Description Client-side public key generated by the user, which will be conditionally added to org data based on the passkey stamp associated with this request |
| { | ‐ |
|
| Description Additional origins requests are allowed from besides Turnkey origins |
| { | ‐ |
|
| Description Updated list of allowed proxy authentication methods. |
|
| Description Updated list of allowed origins for CORS. |
|
| Description Template ID for email-auth messages. |
| { | Description Overrides for auth-related email content. |
|
| Description The name of the application. |
|
| Description A URL pointing to a logo in PNG format. Note this logo will be resized to fit into 340px x 124px. |
|
| Description A template for the URL to be used in a magic link button, e.g. |
|
| Description Unique identifier for a given Email Template. If not specified, the default is the most recent Email Template. |
|
| Description JSON object containing key/value pairs to be used with custom templates. |
| { [ | Description A map of OAuth 2.0 provider and their respective credential ID to use for the OAuth 2.0 authentication flow. |
|
| Description Enable alphanumeric OTP codes. |
|
| Format: int32 Description OTP code lifetime in seconds. |
|
| Format: int32 Description Desired OTP code length (6–9). |
|
| Description Template ID for OTP SMS messages. |
|
| Description Custom reply-to address for auth-related emails. |
|
| Description Custom ‘from’ address for auth-related emails. |
|
| Format: int32 Description Session lifetime in seconds. |
| { | Description Overrides for auth-related SMS content. |
|
| Description Template containing references to .OtpCode i.e Your OTP is {{.OtpCode}} |
|
| Format: int32 Description Verification-token lifetime in seconds. |
| { | Description Overrides for react wallet kit related settings. |
|
| Enabled Social Providers Description List of enabled social login providers (e.g., ‘apple’, ‘google’, ‘facebook’) |
| { | ‐ |
|
| Description The Client ID issued by the OAuth 2.0 provider |
|
| Description The client secret issued by the OAuth 2.0 provider encrypted to the TLS Fetcher quorum key |
|
| Description The ID of the OAuth 2.0 credential to update |
|
| Description The OAuth 2.0 provider |
| { | ‐ |
|
| Description The condition expression that triggers the Effect (optional). |
|
| Description The consensus expression that triggers the Effect (optional). |
|
| Description The instruction to DENY or ALLOW an activity (optional). |
|
| Description Unique identifier for a given Policy. |
|
| Description Human-readable name for a Policy. |
|
| Description Accompanying notes for a Policy (optional). |
| { | ‐ |
|
| Description The condition expression that triggers the Effect (optional). |
|
| Description The consensus expression that triggers the Effect (optional). |
|
| Description The instruction to DENY or ALLOW an activity (optional). |
|
| Description Unique identifier for a given Policy. |
|
| Description Human-readable name for a Policy. |
|
| Description Accompanying notes for a Policy (optional). |
| { | ‐ |
|
| Description A list of Private Keys IDs to add this tag to. |
|
| Description The new, human-readable name for the tag with the given ID. |
|
| Description Unique identifier for a given Private Key Tag. |
|
| Description A list of Private Key IDs to remove this tag from. |
| { | ‐ |
|
| Format: int32 Description The threshold of unique approvals to reach quorum. |
|
| Description The unique identifiers of users who comprise the quorum set. |
| { | ‐ |
|
| Description The user’s email address. Setting this to an empty string will remove the user’s email. |
|
| Description Unique identifier for a given User. |
|
| Description Signed JWT containing a unique id, expiry, verification type, contact |
| { | ‐ |
|
| Description The user’s email address. |
|
| Description Unique identifier for a given User. |
|
| Description Human-readable name for a User. |
|
| Description The user’s phone number in E.164 format e.g. +13214567890 |
|
| Description An updated list of User Tags to apply to this User. This field, if not needed, should be an empty array in your request body. |
| { | ‐ |
|
| Description Unique identifier for a given User. |
|
| Description Human-readable name for a User. |
| { | ‐ |
|
| Description Unique identifier for a given User. |
|
| Description The user’s phone number in E.164 format e.g. +13214567890. Setting this to an empty string will remove the user’s phone number. |
|
| Description Signed JWT containing a unique id, expiry, verification type, contact |
| { | ‐ |
|
| Description A list of User IDs to add this tag to. |
|
| Description The new, human-readable name for the tag with the given ID. |
|
| Description A list of User IDs to remove this tag from. |
|
| Description Unique identifier for a given User Tag. |
| { | ‐ |
|
| Description Unique identifier for a given Wallet. |
|
| Description Human-readable name for a Wallet. |
| { | ‐ |
|
| Description Expiration window (in seconds) indicating how long the verification token is valid for. If not provided, a default of 1 hour will be used. Maximum value is 86400 seconds (24 hours) |
|
| Description OTP sent out to a user’s contact (email or SMS) |
|
| Description ID representing the result of an init OTP activity. |
|
| Description Unique identifier for a given Organization. |
| { | Description Result of the intended action. |
| { | ‐ |
|
| Description Unique identifier for a given Invitation. |
|
| Description Unique identifier for a given User. |
| { | ‐ |
|
| Description The id of the product being subscribed to. |
| { | ‐ |
|
| Description A list of API Key IDs. |
| { | ‐ |
|
| Description A list of API-only User IDs. |
| { | ‐ |
|
| Description A list of Authenticator IDs. |
| { | ‐ |
|
| Description A list of Invitation IDs |
| { | ‐ |
|
| Description Unique identifier of the OAuth 2.0 credential that was created |
| { | ‐ |
|
| Description A list of unique identifiers for Oauth Providers |
| { | ‐ |
|
| Description Unique identifier for a given Organization. |
| { | ‐ |
|
| Description A list of unique identifiers for the created policies. |
| { | ‐ |
|
| Description Unique identifier for a given Policy. |
| { | ‐ |
|
| Description A list of Private Key IDs. |
| { | ‐ |
|
| Description A list of Private Key IDs and addresses. |
| { | ‐ |
|
| Description A list of Private Key IDs. |
|
| Description Unique identifier for a given Private Key Tag. |
| { | ‐ |
|
| Description Unique identifier for a given Organization. If the request is being made by a user and their Sub-Organization ID is unknown, this can be the Parent Organization ID. However, using the Sub-Organization ID is preferred due to performance reasons. |
|
| Description Human-readable name for an Organization. |
|
| Description String representing a read only session |
|
| Format: uint64 Description UTC timestamp in seconds representing the expiry time for the read only session. |
|
| Description Unique identifier for a given User. |
|
| Description Human-readable name for a User. |
| { | ‐ |
|
| Description Unique identifier for the created API key. |
|
| Description HPKE encrypted credential bundle |
|
| Description Unique identifier for a given Organization. If the request is being made by a user and their Sub-Organization ID is unknown, this can be the Parent Organization ID. However, using the Sub-Organization ID is preferred due to performance reasons. |
|
| Description Human-readable name for an Organization. |
|
| Description Unique identifier for a given User. |
|
| Description Human-readable name for a User. |
| { | ‐ |
|
| Description Unique identifier for the created API key. |
|
| Description HPKE encrypted credential bundle |
|
| Description Unique identifier for a given Organization. If the request is being made by a user and their Sub-Organization ID is unknown, this can be the Parent Organization ID. However, using the Sub-Organization ID is preferred due to performance reasons. |
|
| Description Human-readable name for an Organization. |
|
| Description Unique identifier for a given User. |
|
| Description Human-readable name for a User. |
| { | ‐ |
|
| Description The ID of the created Smart Contract Interface. |
| { | ‐ |
|
| ‐ |
|
| ‐ |
| { | ‐ |
|
| Description A list of Private Key IDs and addresses. |
|
| ‐ |
|
| ‐ |
| { | ‐ |
|
| ‐ |
|
| ‐ |
| { | ‐ |
|
| Description A list of account addresses. |
|
| ‐ |
| { | ‐ |
|
| ‐ |
|
| ‐ |
| { | ‐ |
|
| Description A list of account addresses. |
|
| ‐ |
| { | ‐ |
|
| ‐ |
|
| ‐ |
| { | ‐ |
|
| Description A list of account addresses. |
|
| ‐ |
| { | ‐ |
|
| ‐ |
|
| ‐ |
| { | ‐ |
|
| Description A list of account addresses. |
|
| ‐ |
| { | ‐ |
|
| Description A list of User IDs. |
| { | ‐ |
|
| Description A list of User IDs. |
|
| Description Unique identifier for a given User Tag. |
| { | ‐ |
|
| Description A list of derived addresses. |
| { | ‐ |
|
| Description A list of account addresses. |
|
| Description Unique identifier for a Wallet. |
| { | ‐ |
|
| Description A list of API Key IDs. |
| { | ‐ |
|
| Description Unique identifier for a given Authenticator. |
| { | ‐ |
|
| Description Unique identifier for a given Invitation. |
| { | ‐ |
|
| Description Unique identifier of the OAuth 2.0 credential that was deleted |
| { | ‐ |
|
| Description A list of unique identifiers for Oauth Providers |
| { | ‐ |
|
| Description Unique identifier for a given Organization. |
| { | ‐ |
|
| Description The payment method that was removed. |
| { | ‐ |
|
| Description Unique identifier for a given Policy. |
| { | ‐ |
|
| Description A list of private key unique identifiers that were removed |
| { | ‐ |
|
| Description A list of Private Key IDs. |
|
| Description A list of Private Key Tag IDs. |
| { | ‐ |
|
| Description The ID of the deleted Smart Contract Interface. |
| { | ‐ |
|
| Description Unique identifier of the sub organization that was removed |
| { | ‐ |
|
| Description A list of User IDs. |
| { | ‐ |
|
| Description A list of User IDs. |
|
| Description A list of User Tag IDs. |
| { | ‐ |
|
| Description A list of wallet unique identifiers that were removed |
| { [ | ‐ |
| { | ‐ |
|
| Description Unique identifier for a given Private Key. |
| { | ‐ |
|
| Description Unique identifier for the created API key. |
|
| Description Unique identifier for the authenticating User. |
| { | ‐ |
|
| Description A User ID with permission to initiate authentication. |
| { | ‐ |
|
| Description Export bundle containing a private key encrypted to the client’s target public key. |
|
| Description Unique identifier for a given Private Key. |
| { | ‐ |
|
| Description Address to identify Wallet Account. |
|
| Description Export bundle containing a private key encrypted by the client’s target public key. |
| { | ‐ |
|
| Description Export bundle containing a wallet mnemonic + optional newline passphrase encrypted by the client’s target public key. |
|
| Description Unique identifier for a given Wallet. |
| { | ‐ |
|
| Description A list of addresses. |
|
| Description Unique identifier for a Private Key. |
| { | ‐ |
|
| Description A list of account addresses. |
|
| Description Unique identifier for a Wallet. |
| { | ‐ |
|
| Description Unique identifier used to retrieve transaction statuses for a given fiat on-ramp flow. |
|
| Description Unique URL for a given fiat on-ramp flow. |
| { | ‐ |
|
| Description Import bundle containing a public key and signature to use for importing client data. |
| { | ‐ |
|
| Description Import bundle containing a public key and signature to use for importing client data. |
| { | ‐ |
|
| Description Unique identifier for an OTP authentication |
| { | ‐ |
|
| Description Unique identifier for an OTP authentication |
| { | ‐ |
|
| Description Unique identifier for an OTP authentication |
| { | ‐ |
|
| Description Unique identifier for the user being recovered. |
| { | ‐ |
|
| Description Base64 encoded OIDC token issued by Turnkey to be used with the LoginWithOAuth activity |
| { | ‐ |
|
| Description Signed JWT containing an expiry, public key, session type, user id, and organization id |
| { | ‐ |
|
| Description Unique identifier for the created API key. |
|
| Description HPKE encrypted credential bundle |
|
| Description Unique identifier for the authenticating User. |
| { | ‐ |
|
| Description Unique identifier for the created API key. |
|
| Description HPKE encrypted credential bundle |
|
| Description Unique identifier for the authenticating User. |
| { | ‐ |
|
| Description Signed JWT containing an expiry, public key, session type, user id, and organization id |
| { | ‐ |
|
| Description ID of the authenticator created. |
| { | ‐ |
|
| Description Resulting list of organization features. |
| { | ‐ |
|
| Description Resulting list of organization features. |
| { | ‐ |
|
| Description The email address associated with the payment method. |
|
| Description The name associated with the payment method. |
|
| Description The last four digits of the credit card added. |
| { | ‐ |
|
| Description Component of an ECSDA signature. |
|
| Description Component of an ECSDA signature. |
|
| Description Component of an ECSDA signature. |
| { | ‐ |
|
| ‐ |
| { | ‐ |
|
| ‐ |
| { | ‐ |
|
| Description Signed JWT containing an expiry, public key, session type, user id, and organization id |
| { [ | ‐ |
| { | ‐ |
|
| Description Unique identifier for a given User. (representing the turnkey signer user id) |
| { | ‐ |
|
| Description Unique identifier of the OAuth 2.0 credential that was updated |
| { | ‐ |
|
| Description Unique identifier for a given Policy. |
| { | ‐ |
|
| Description Unique identifier for a given Policy. |
| { | ‐ |
|
| Description Unique identifier for a given Private Key Tag. |
| { [ | ‐ |
| { | ‐ |
|
| Description Unique identifier of the User whose email was updated. |
| { | ‐ |
|
| Description Unique identifier of the User whose name was updated. |
| { | ‐ |
|
| Description Unique identifier of the User whose phone number was updated. |
| { | ‐ |
|
| Description A User ID. |
| { | ‐ |
|
| Description Unique identifier for a given User Tag. |
| { | ‐ |
|
| Description A Wallet ID. |
| { | ‐ |
|
| Description Signed JWT containing a unique id, expiry, verification type, contact. Verification status of a user is updated when the token is consumed (in OTP_LOGIN requests) |
| | | Description The current processing status of a specified Activity. |
| | | Description Type of Activity, such as Add User, or Sign Transaction. |
| { | ‐ |
|
| ‐ |
|
| ‐ |
|
| Description A list of objects representing a particular User’s approval or rejection of a Consensus request, including all relevant metadata. |
|
| ‐ |
|
| ‐ |
Returns
Promise
<NonNullable
<object
[T
]>>
Inherited from
BaseSignerClient
.pollActivityCompletion
removeEmail()
1 removeEmail(): Promise<void>;
Defined in: account-kit/signer/src/client/base.ts:364
Removes the email for the authenticated user, disallowing them from login with that email.
Returns
Promise
<void
>
A promise that resolves when the email is removed
Throws
If the user is not authenticated
Inherited from
removeMfa()
1 removeMfa(params): Promise<{ 2 multiFactors: MfaFactor[]; 3 }>;
Defined in: account-kit/signer/src/client/base.ts:1226
Removes existing MFA factors by ID.
Parameters
Parameter | Type | Description |
---|---|---|
| The parameters specifying which factors to disable |
Returns
Promise
<{
multiFactors
: MfaFactor
[];
}>
A promise that resolves to the updated list of MFA factors
Throws
If no user is authenticated
Inherited from
removeOauthProvider()
1 removeOauthProvider(providerId): Promise<void>;
Defined in: account-kit/signer/src/client/base.ts:626
Deletes a specified OAuth provider for the authenticated user.
Parameters
Parameter | Type | Description |
---|---|---|
|
| The ID of the provider to be deleted |
Returns
Promise
<void
>
Throws
If the user is not authenticated
Inherited from
BaseSignerClient
.removeOauthProvider
removePasskey()
1 removePasskey(authenticatorId): Promise<void>;
Defined in: account-kit/signer/src/client/base.ts:533
Removes a passkey authenticator from the user’s account.
Parameters
Parameter | Type | Description |
---|---|---|
|
| The ID of the authenticator to remove. |
Returns
Promise
<void
>
A promise that resolves when the authenticator is removed.
Throws
If the user is not authenticated.
Inherited from
BaseSignerClient
.removePasskey
removePhoneNumber()
1 removePhoneNumber(): Promise<void>;
Defined in: account-kit/signer/src/client/base.ts:433
Removes the phone number for the authenticated user, disallowing them from login with that phone number.
Returns
Promise
<void
>
A promise that resolves when the phone number is removed
Throws
If the user is not authenticated
Inherited from
BaseSignerClient
.removePhoneNumber
request()
1 request<R>(route, body): Promise<SignerResponse<R>>;
Defined in: account-kit/signer/src/client/base.ts:1086
Sends a POST request to the given signer route with the specified body and returns the response. Not intended to be used directly, use the specific methods instead on the client instead.
Type Parameters
Type Parameter |
---|
|
Parameters
Parameter | Type | Description |
---|---|---|
|
| The route to which the request should be sent |
|
| The request body containing the data to be sent |
Returns
Promise
<SignerResponse
<R
>>
A promise that resolves to the response from the signer
Inherited from
setEmail()
Implementation for setEmail method with optional OTP verification.
Param
An OTP object containing the OTP ID & OTP code (or an email address for legacy usage)
Call Signature
1 setEmail(email): Promise<string>;
Defined in: account-kit/signer/src/client/base.ts:318
Sets the email for the authenticated user, allowing them to login with that email.
Deprecated
You must contact Alchemy to enable this feature for your team, as there are important security considerations. In particular, you must not call this without first validating that the user owns this email account. Recommended to use the email verification flow instead.
Parameters
Parameter | Type | Description |
---|---|---|
|
| The email to set for the user |
Returns
Promise
<string
>
A promise that resolves to the updated email
Throws
If the user is not authenticated
Inherited from
Call Signature
1 setEmail(otp): Promise<string>;
Defined in: account-kit/signer/src/client/base.ts:328
Sets the email for the authenticated user, allowing them to login with that
email. Must be called after calling initOtp
with the email.
Parameters
Parameter | Type | Description |
---|---|---|
| The OTP verification object including the OTP ID and OTP code |
Returns
Promise
<string
>
A promise that resolves to the updated email
Throws
If the user is not authenticated
Inherited from
setPhoneNumber()
1 setPhoneNumber(otp): Promise<void>;
Defined in: account-kit/signer/src/client/base.ts:418
Updates the phone number for the authenticated user, allowing them to login with that
phone number. Must be called after calling initOtp
with the phone number.
Parameters
Parameter | Type | Description |
---|---|---|
| The OTP object including the OTP ID and OTP code |
Returns
Promise
<void
>
A promise that resolves when the phone number is set
Throws
If the user is not authenticated
Inherited from
BaseSignerClient
.setPhoneNumber
setStamper()
1 protected setStamper(stamper): void;
Defined in: account-kit/signer/src/client/base.ts:148
Sets the stamper of the TurnkeyClient.
Parameters
Parameter | Type | Description |
---|---|---|
|
| the stamper function to set for the TurnkeyClient |
Returns
void
Inherited from
signRawMessage()
1 signRawMessage(msg, mode): Promise<`0x${string}`>;
Defined in: account-kit/signer/src/client/base.ts:834
This will sign a message with the user’s private key, without doing any transformations on the message. For SignMessage or SignTypedData, the caller should hash the message before calling this method and pass that result here.
Parameters
Parameter | Type | Default value | Description |
---|---|---|---|
|
|
| the hex representation of the bytes to sign |
|
|
| specify if signing should happen for solana or ethereum |
Returns
Promise
<`0x${string}`
>
the signature over the raw hex
Inherited from
BaseSignerClient
.signRawMessage
stampGetOrganization()
1 stampGetOrganization(): Promise<TSignedRequest>;
Defined in: account-kit/signer/src/client/base.ts:742
Generates a stamped getOrganization request for the current user.
Returns
Promise
<TSignedRequest
>
a promise that resolves to the “getOrganization” information for the logged in user
Throws
if no user is authenticated
Inherited from
BaseSignerClient
.stampGetOrganization
stampWhoami()
1 stampWhoami(): Promise<TSignedRequest>;
Defined in: account-kit/signer/src/client/base.ts:726
Generates a stamped whoami request for the current user. This request can then be used to call /signer/v1/whoami to get the user information. This is useful if you want to get the user information in a different context like a server. You can pass the stamped request to the server and then call our API to get the user information. Using this stamp is the most trusted way to get the user information since a stamp can only belong to the user who created it.
Returns
Promise
<TSignedRequest
>
a promise that resolves to the “whoami” information for the logged in user
Throws
if no organization ID is provided
Inherited from
validateMultiFactors()
1 validateMultiFactors(params): Promise<{ 2 bundle: string; 3 }>;
Defined in: account-kit/signer/src/client/base.ts:1258
Validates multiple MFA factors using the provided encrypted payload and MFA codes.
Parameters
Parameter | Type | Description |
---|---|---|
| The validation parameters |
Returns
Promise
<{
bundle
: string
;
}>
A promise that resolves to an object containing the credential bundle
Throws
If no credential bundle is returned from the server
Inherited from
BaseSignerClient
.validateMultiFactors
verifyMfa()
1 verifyMfa(params): Promise<{ 2 multiFactors: MfaFactor[]; 3 }>;
Defined in: account-kit/signer/src/client/base.ts:1193
Verifies a newly created MFA factor to complete the setup process.
Parameters
Parameter | Type | Description |
---|---|---|
| The parameters required to verify the MFA factor |
Returns
Promise
<{
multiFactors
: MfaFactor
[];
}>
A promise that resolves to the updated list of MFA factors
Throws
If no user is authenticated
Inherited from
whoami()
1 whoami( 2 orgId?, 3 idToken?, 4 accessToken?): Promise<User>;
Defined in: account-kit/signer/src/client/base.ts:666
Retrieves the current user or fetches the user information if not already available.
Parameters
Parameter | Type | Description |
---|---|---|
|
| optional organization ID, defaults to the user’s organization ID |
|
| an OIDC ID token containing additional user information |
|
| an access token which if provided will be added to the user |
Returns
Promise
<User
>
A promise that resolves to the user object
Throws
if no organization ID is provided when there is no current user