Complete device registration

curl --request POST \
  --url https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-Device-Authorization: <x-device-authorization>' \
  --header 'X-Registration-Flow-Authorization: <x-registration-flow-authorization>' \
  --data '
{
  "idempotencyKey": "9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e",
  "registrationHandle": "Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q",
  "registrationCodeVerifier": "zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg",
  "authKeyPublicKey": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA"
}
'

import requests

url = "https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration"

payload = {
    "idempotencyKey": "9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e",
    "registrationHandle": "Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q",
    "registrationCodeVerifier": "zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg",
    "authKeyPublicKey": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA"
}
headers = {
    "X-Device-Authorization": "<x-device-authorization>",
    "X-Registration-Flow-Authorization": "<x-registration-flow-authorization>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Device-Authorization': '<x-device-authorization>',
    'X-Registration-Flow-Authorization': '<x-registration-flow-authorization>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    idempotencyKey: '9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e',
    registrationHandle: 'Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q',
    registrationCodeVerifier: 'zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg',
    authKeyPublicKey: 'MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA'
  })
};

fetch('https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'idempotencyKey' => '9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e',
    'registrationHandle' => 'Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q',
    'registrationCodeVerifier' => 'zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg',
    'authKeyPublicKey' => 'MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-Device-Authorization: <x-device-authorization>",
    "X-Registration-Flow-Authorization: <x-registration-flow-authorization>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration"

	payload := strings.NewReader("{\n  \"idempotencyKey\": \"9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e\",\n  \"registrationHandle\": \"Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q\",\n  \"registrationCodeVerifier\": \"zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg\",\n  \"authKeyPublicKey\": \"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Device-Authorization", "<x-device-authorization>")
	req.Header.Add("X-Registration-Flow-Authorization", "<x-registration-flow-authorization>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration")
  .header("X-Device-Authorization", "<x-device-authorization>")
  .header("X-Registration-Flow-Authorization", "<x-registration-flow-authorization>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"idempotencyKey\": \"9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e\",\n  \"registrationHandle\": \"Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q\",\n  \"registrationCodeVerifier\": \"zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg\",\n  \"authKeyPublicKey\": \"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Device-Authorization"] = '<x-device-authorization>'
request["X-Registration-Flow-Authorization"] = '<x-registration-flow-authorization>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"idempotencyKey\": \"9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e\",\n  \"registrationHandle\": \"Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q\",\n  \"registrationCodeVerifier\": \"zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg\",\n  \"authKeyPublicKey\": \"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA\"\n}"

response = http.request(request)
puts response.read_body

{
  "data": {
    "deviceCredentialStatus": "active",
    "ownerBindingId": "7b2e4c6a-1d3f-4a5b-8c9d-0e1f2a3b4c5d",
    "authKeyId": "5c8d1e2f-3a4b-4c6d-9e0f-1a2b3c4d5e6f",
    "resolvedAt": 1759766520000
  }
}

{
  "code": 2,
  "message": "API parameter invalid.",
  "externalMessage": "The provided amount exceeds the maximum allowed.",
  "errors": [
    {
      "error": "invalid_value",
      "message": "The operation and assetType combination is invalid.",
      "location": "assetType"
    }
  ]
}

{
  "code": 420031,
  "message": "The device authorization is invalid"
}

{
  "code": 2,
  "message": "API parameter invalid.",
  "externalMessage": "The provided amount exceeds the maximum allowed.",
  "errors": [
    {
      "error": "invalid_value",
      "message": "The operation and assetType combination is invalid.",
      "location": "assetType"
    }
  ]
}

{
  "code": 2,
  "message": "API parameter invalid.",
  "externalMessage": "The provided amount exceeds the maximum allowed.",
  "errors": [
    {
      "error": "invalid_value",
      "message": "The operation and assetType combination is invalid.",
      "location": "assetType"
    }
  ]
}

{
  "code": 2,
  "message": "API parameter invalid.",
  "externalMessage": "The provided amount exceeds the maximum allowed.",
  "errors": [
    {
      "error": "invalid_value",
      "message": "The operation and assetType combination is invalid.",
      "location": "assetType"
    }
  ]
}

{
  "code": 2,
  "message": "API parameter invalid.",
  "externalMessage": "The provided amount exceeds the maximum allowed.",
  "errors": [
    {
      "error": "invalid_value",
      "message": "The operation and assetType combination is invalid.",
      "location": "assetType"
    }
  ]
}

{
  "code": -1,
  "message": "Something went wrong. errId: 1f0b0c455e40f753f07b4f0ae6abd4b4"
}

Complete device registration

Non-custodial accounts are available in sandbox only. Production non-custodial accounts are on the roadmap.

Registers the authorization key that the Digital Asset Accounts SDK created on the end user’s device and activates it for the end customer linked by POST /v1/accounts/auth/sessions. After this call, the authorization key signs the X-Device-Authorization header on non-custodial requests.

The request needs two signatures from the SDK: X-Device-Authorization from the new authorization key, and X-Registration-Flow-Authorization from the temporary key created when the login was prepared. Your backend relay must forward both headers and the body unchanged.

This call doesn’t create an account or a wallet.

POST

accounts

auth

deviceKeyRegistration

Complete device registration

curl --request POST \
  --url https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-Device-Authorization: <x-device-authorization>' \
  --header 'X-Registration-Flow-Authorization: <x-registration-flow-authorization>' \
  --data '
{
  "idempotencyKey": "9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e",
  "registrationHandle": "Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q",
  "registrationCodeVerifier": "zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg",
  "authKeyPublicKey": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA"
}
'

import requests

url = "https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration"

payload = {
    "idempotencyKey": "9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e",
    "registrationHandle": "Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q",
    "registrationCodeVerifier": "zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg",
    "authKeyPublicKey": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA"
}
headers = {
    "X-Device-Authorization": "<x-device-authorization>",
    "X-Registration-Flow-Authorization": "<x-registration-flow-authorization>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Device-Authorization': '<x-device-authorization>',
    'X-Registration-Flow-Authorization': '<x-registration-flow-authorization>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    idempotencyKey: '9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e',
    registrationHandle: 'Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q',
    registrationCodeVerifier: 'zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg',
    authKeyPublicKey: 'MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA'
  })
};

fetch('https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'idempotencyKey' => '9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e',
    'registrationHandle' => 'Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q',
    'registrationCodeVerifier' => 'zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg',
    'authKeyPublicKey' => 'MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-Device-Authorization: <x-device-authorization>",
    "X-Registration-Flow-Authorization: <x-registration-flow-authorization>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration"

	payload := strings.NewReader("{\n  \"idempotencyKey\": \"9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e\",\n  \"registrationHandle\": \"Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q\",\n  \"registrationCodeVerifier\": \"zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg\",\n  \"authKeyPublicKey\": \"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Device-Authorization", "<x-device-authorization>")
	req.Header.Add("X-Registration-Flow-Authorization", "<x-registration-flow-authorization>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration")
  .header("X-Device-Authorization", "<x-device-authorization>")
  .header("X-Registration-Flow-Authorization", "<x-registration-flow-authorization>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"idempotencyKey\": \"9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e\",\n  \"registrationHandle\": \"Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q\",\n  \"registrationCodeVerifier\": \"zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg\",\n  \"authKeyPublicKey\": \"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api-sandbox.circle.com/v1/accounts/auth/deviceKeyRegistration")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Device-Authorization"] = '<x-device-authorization>'
request["X-Registration-Flow-Authorization"] = '<x-registration-flow-authorization>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"idempotencyKey\": \"9b3c4d5e-6f7a-4b8c-8d9e-1f2a3b4c5d6e\",\n  \"registrationHandle\": \"Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q\",\n  \"registrationCodeVerifier\": \"zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg\",\n  \"authKeyPublicKey\": \"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA\"\n}"

response = http.request(request)
puts response.read_body

{
  "data": {
    "deviceCredentialStatus": "active",
    "ownerBindingId": "7b2e4c6a-1d3f-4a5b-8c9d-0e1f2a3b4c5d",
    "authKeyId": "5c8d1e2f-3a4b-4c6d-9e0f-1a2b3c4d5e6f",
    "resolvedAt": 1759766520000
  }
}

{
  "code": 2,
  "message": "API parameter invalid.",
  "externalMessage": "The provided amount exceeds the maximum allowed.",
  "errors": [
    {
      "error": "invalid_value",
      "message": "The operation and assetType combination is invalid.",
      "location": "assetType"
    }
  ]
}

{
  "code": 420031,
  "message": "The device authorization is invalid"
}

{
  "code": 2,
  "message": "API parameter invalid.",
  "externalMessage": "The provided amount exceeds the maximum allowed.",
  "errors": [
    {
      "error": "invalid_value",
      "message": "The operation and assetType combination is invalid.",
      "location": "assetType"
    }
  ]
}

{
  "code": 2,
  "message": "API parameter invalid.",
  "externalMessage": "The provided amount exceeds the maximum allowed.",
  "errors": [
    {
      "error": "invalid_value",
      "message": "The operation and assetType combination is invalid.",
      "location": "assetType"
    }
  ]
}

{
  "code": 2,
  "message": "API parameter invalid.",
  "externalMessage": "The provided amount exceeds the maximum allowed.",
  "errors": [
    {
      "error": "invalid_value",
      "message": "The operation and assetType combination is invalid.",
      "location": "assetType"
    }
  ]
}

{
  "code": 2,
  "message": "API parameter invalid.",
  "externalMessage": "The provided amount exceeds the maximum allowed.",
  "errors": [
    {
      "error": "invalid_value",
      "message": "The operation and assetType combination is invalid.",
      "location": "assetType"
    }
  ]
}

{
  "code": -1,
  "message": "Something went wrong. errId: 1f0b0c455e40f753f07b4f0ae6abd4b4"
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

X-Device-Authorization

string

required

Compact ES256 JWS that the Digital Asset Accounts SDK creates on the end user's device. It signs this request's method, path, and exact body bytes (an empty body for GET requests) with the authorization key the end user registered. The SDK creates a new value for every new request.

A missing value returns 400 (error code 420031). A value that isn't a well-formed compact JWS returns 401 (error code 420031).

The SDK gives each value an expiry at most 5 minutes after it signs it. Unless the operation says otherwise, Circle rejects a value whose expiry has passed or whose signing time is in the future, allowing 60 seconds of clock difference either way, with 400 (error code 420031). A device clock that's off by more than 60 seconds causes the same error. Retry within the value's lifetime, or let the SDK sign the request again.

Your backend relay must forward this header, and the request body, exactly as the SDK sent them. Don't parse, reformat, or re-serialize the body. If the bytes change, Circle rejects the request.

Compact ES256 JWS created by the Digital Asset Accounts SDK on the end user's device.

Required string length: 64 - 8192

Example:

"eyJhbGciOiJFUzI1NiJ9.e30.AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw"

X-Registration-Flow-Authorization

string

required

Compact ES256 JWS that the Digital Asset Accounts SDK creates on the end user's device with the temporary registration key it generated for this login (the key whose public half was sent as registrationFlowPublicKey when the login was prepared). It signs this request's exact body bytes.

The SDK gives each value an expiry at most 5 minutes after it signs it. Circle rejects a value whose expiry has passed or whose signing time is in the future, allowing 60 seconds of clock difference either way, with 400 (error code 420031). A device clock that's off by more than 60 seconds causes the same error. Retry within the value's lifetime, or let the SDK sign the request again.

Your backend relay must forward this header, and the request body, exactly as the SDK sent them. Don't parse, reformat, or re-serialize the body.

Compact ES256 JWS created by the Digital Asset Accounts SDK on the end user's device.

Required string length: 64 - 8192

Example:

"eyJhbGciOiJFUzI1NiJ9.e30.AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-Pw"

Body

application/json

idempotencyKey

string<uuid>

required

Universally unique identifier (UUID v4) idempotency key. This key is utilized to ensure exactly-once execution of mutating requests.

Example:

"ba943ff1-ca16-49b2-ba55-1057e70ca5c7"

registrationHandle

string

required

The registrationHandle returned by POST /v1/accounts/auth/sessions.

Maximum string length: 200

Example:

"Yk3vQ9xR2mT7nL4pW8sZ1cF6hJ0aD5eG3uB9iK2oN7q"

registrationCodeVerifier

string

required

The PKCE code verifier whose S256 challenge was sent as registrationCodeChallenge when the login was prepared. Unpadded base64url.

Pattern: ^[A-Za-z0-9_-]{43,256}$

Example:

"zkpGrxlb_K57zml2GD-hwY0iaoYuAC3Dn93ls0I-Kgg"

authKeyPublicKey

string

required

Public key of the P-256 authorization key that the Digital Asset Accounts SDK created on the device. After registration, this key signs the X-Device-Authorization header.

Required string length: 122

Example:

"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6datWbQ0kQFkT9lH_qz1su-2nvHaOIuCfQnh3w_tNntxJQOob8_kRkV7_wuoVz7dPVXqDaSXLd2cugsh7LncOA"

Response

Successfully registered and activated the authorization key.

data

object

required

The active device registration for an end customer.

Show child attributes

Accounts

First-party bank operations

First-party crypto operations

Third-party crypto operations

Cross-currency API

Notifications

Security

Complete device registration

Authorizations

Headers

Body

Response