> ## Documentation Index
> Fetch the complete documentation index at: https://developer.coincover.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Store secure encrypted files

> Stores an already-encrypted file. CoinCover applies no additional server-side encryption.



## OpenAPI

````yaml /specs/institutional.openapi.json post /v1/secure/file
openapi: 3.0.0
info:
  title: Recover for Institutions API
  description: >-
    Direct integration for institutions backing up their own digital asset
    wallets. Uses the standard /v1/* endpoints: organisation and package are
    optional, and key_environment selects HOT (online) or COLD (offline)
    generation and storage. HOT vs COLD is a request parameter, not a URL path
    segment. Self-service verification endpoints are available for keys and
    backups. Key generation and storage use AWS Nitro Enclaves for
    hardware-isolated cryptographic operations.
  version: 1.0.0
servers:
  - url: https://service.uat-keys.coincover.com
    description: Sandbox (UAT)
  - url: https://service.keys.coincover.com
    description: Production — confirm host with your account manager
security:
  - bearerAuth: []
tags:
  - name: Keys
    description: Generate, assign, and verify cryptographic keys.
  - name: Backups
    description: Store and verify encrypted backup data and files.
paths:
  /v1/secure/file:
    post:
      tags:
        - Backups
      summary: Store secure encrypted files
      description: >-
        Stores an already-encrypted file. CoinCover applies no additional
        server-side encryption.
      operationId: storeSecureFile
      parameters:
        - name: Authorization
          in: header
          description: >-
            Bearer token for authentication. Can be either a JWT token or API
            key.
          required: true
          schema:
            $ref: '#/components/schemas/Authorization'
      requestBody:
        description: Secure file and metadata
        required: true
        content:
          multipart/form-data:
            schema:
              $ref: '#/components/schemas/SecureFileRequest'
      responses:
        '200':
          description: Secure file successfully stored
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecureFileResponse'
        '400':
          description: Invalid request parameters or verification failed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '500':
          description: Internal server error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
components:
  schemas:
    Authorization:
      type: string
    SecureFileRequest:
      type: object
      required:
        - public_key
        - file
      properties:
        public_key:
          type: string
          pattern: ^[0-9a-fA-F]+$
          minLength: 32
          maxLength: 4096
          description: Public key in hex format used to encrypt the file
        file:
          type: string
          format: binary
          description: Encrypted file to upload (e.g. a ZIP archive)
        metadata:
          type: object
          description: Optional metadata about the file
          properties:
            description:
              type: string
              description: Human-readable description of the file
            content_type:
              type: string
              description: MIME type of the original file
            original_filename:
              type: string
              description: Original filename of the file
    SecureFileResponse:
      type: object
      properties:
        backup_id:
          type: string
          format: uuid
          description: Unique identifier for the stored file
        backup_type:
          type: string
          enum:
            - file
          description: Type of backup (always 'file' for secure-file endpoint)
        metadata:
          type: object
          description: Combined metadata including original metadata
    ErrorResponse:
      type: object
      properties:
        message:
          type: string
          description: Error message
        error:
          type: string
          description: Error type
  securitySchemes:
    bearerAuth:
      description: Bearer token authentication. Can be either a JWT token or API key.
      type: http
      scheme: bearer

````