> ## Documentation Index
> Fetch the complete documentation index at: https://developer.coincover.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Partner - Store secure encrypted files

> Stores encrypted files securely. The key environment is determined from the provided key. The file must already be encrypted on the partner side; CoinCover applies no additional server-side encryption. Maximum payload 10MB. Partner-only endpoint.



## OpenAPI

````yaml /specs/wallet-provider.openapi.json post /v1/partner/secure/file
openapi: 3.0.0
info:
  title: Recover for Wallet Providers — Partner Key Service API
  description: >-
    Partner Key Service for wallet providers integrating CoinCover under the
    hood of their platform to back up their customers' wallets. All endpoints
    live under /v1/partner/* and require organisation and package metadata. HOT
    vs COLD is selected with the key_environment parameter at assignment time,
    not via the URL path. Key generation and storage use AWS Nitro Enclaves for
    hardware-isolated cryptographic operations.
  version: 1.0.0
servers:
  - url: https://service.uat-keys.coincover.com
    description: Sandbox (UAT)
  - url: https://service.keys.coincover.com
    description: Production — confirm host with your account manager
security:
  - bearerAuth: []
tags:
  - name: Keys
    description: Generate, assign, and verify cryptographic keys.
  - name: Backups
    description: Store and verify encrypted backup data and files.
paths:
  /v1/partner/secure/file:
    post:
      tags:
        - Backups
      summary: Partner - Store secure encrypted files
      description: >-
        Stores encrypted files securely. The key environment is determined from
        the provided key. The file must already be encrypted on the partner
        side; CoinCover applies no additional server-side encryption. Maximum
        payload 10MB. Partner-only endpoint.
      operationId: partnerStoreSecureFile
      parameters:
        - name: Authorization
          in: header
          description: >-
            Bearer token for authentication. Can be either a JWT token or API
            key.
          required: true
          schema:
            $ref: '#/components/schemas/Authorization'
      requestBody:
        description: Secure file and metadata
        required: true
        content:
          multipart/form-data:
            schema:
              $ref: '#/components/schemas/PartnerSecureFileRequest'
      responses:
        '200':
          description: Secure file successfully stored
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecureFileResponse'
        '400':
          description: Invalid request parameters or verification failed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '413':
          description: Payload too large (over 10MB)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '415':
          description: Unsupported media type
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
components:
  schemas:
    Authorization:
      type: string
    PartnerSecureFileRequest:
      type: object
      required:
        - public_key
        - file
      properties:
        public_key:
          type: string
          pattern: ^[0-9a-fA-F]+$
          minLength: 32
          maxLength: 4096
          description: Public key in hex format used to encrypt the file
        file:
          type: string
          format: binary
          description: Encrypted file to upload (e.g. a ZIP archive)
        metadata:
          type: object
          description: Optional metadata about the file
          properties:
            description:
              type: string
              description: Human-readable description of the file
            content_type:
              type: string
              description: MIME type of the original file
            original_filename:
              type: string
              description: Original filename of the file
    SecureFileResponse:
      type: object
      properties:
        backup_id:
          type: string
          format: uuid
          description: Unique identifier for the stored file
        backup_type:
          type: string
          enum:
            - file
          description: Type of backup (always 'file' for secure-file endpoint)
        metadata:
          type: object
          description: Combined metadata including original metadata
    ErrorResponse:
      type: object
      properties:
        message:
          type: string
          description: Error message
        error:
          type: string
          description: Error type
  securitySchemes:
    bearerAuth:
      description: Bearer token authentication. Can be either a JWT token or API key.
      type: http
      scheme: bearer

````