Skip to main content
POST
Request Vault Access

Authorizations

Authorization
string
header
required

EdDSA-signed JWT obtained via OAuth 2.1 client_credentials or CIBA

Body

application/json
itemName
string
required
Required string length: 1 - 128
fieldPath
string
required
Required string length: 1 - 64
purpose
string
required
Required string length: 1 - 512
ephemeralPublicKey
string
required
Required string length: 1 - 256
expiresInSecs
integer
default:120
Required range: 30 <= x <= 600

Response

Default Response

id
string
required

Access request ID — use this to poll status

status
string
required

Initial status — typically "pending"

challengeHex
string
required

Challenge the mobile device signs on approval

ephemeralPublicKey
string
required
expiresAt
string<date-time>
required
createdAt
string<date-time>
required