Partner - Assign a new key with environment specification
Creates a new key pair with the enclave, shards the private key, and securely stores the encrypted key shards. Includes key environment specification: HOT (online generation/storage) or COLD (offline generation/storage). Partner-only endpoint.
Authorizations
Bearer token authentication. Can be either a JWT token or API key.
Headers
Bearer token for authentication. Can be either a JWT token or API key.
Body
Key assignment details with key environment specification
Unique identifier of the user
Type of cryptographic key to generate. rsa4096 for encryption of recovery material; secp256k1 or ed25519 for blockchain backup signers.
rsa4096, secp256k1, ed25519 Key environment specification - HOT (online generation) or COLD (offline generation)
HOT, COLD Organisation metadata
Package metadata
Response
Key successfully assigned
Unique identifier for the key
Public key in hex format
Signature of the key in base64 format, produced by the generating enclave. Verify against your CoinCover verification key before encrypting recovery material.
External customer identifier (e.g. organisation customer ID)
External package identifier (e.g. workspace/package ID)
Optional metadata describing the associated organisation and package