Export a WAAS wallet private key

curl --request POST \
  --url https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "exportId": "<string>",
  "addressType": "<string>",
  "proposalId": "95b11417-f18f-457f-8804-68e361f9164f",
  "shareSetId": "95b11417-f18f-457f-8804-68e361f9164f"
}
'

import requests

url = "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export"

payload = {
    "exportId": "<string>",
    "addressType": "<string>",
    "proposalId": "95b11417-f18f-457f-8804-68e361f9164f",
    "shareSetId": "95b11417-f18f-457f-8804-68e361f9164f"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    exportId: '<string>',
    addressType: '<string>',
    proposalId: '95b11417-f18f-457f-8804-68e361f9164f',
    shareSetId: '95b11417-f18f-457f-8804-68e361f9164f'
  })
};

fetch('https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'exportId' => '<string>',
    'addressType' => '<string>',
    'proposalId' => '95b11417-f18f-457f-8804-68e361f9164f',
    'shareSetId' => '95b11417-f18f-457f-8804-68e361f9164f'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export"

	payload := strings.NewReader("{\n  \"exportId\": \"<string>\",\n  \"addressType\": \"<string>\",\n  \"proposalId\": \"95b11417-f18f-457f-8804-68e361f9164f\",\n  \"shareSetId\": \"95b11417-f18f-457f-8804-68e361f9164f\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"exportId\": \"<string>\",\n  \"addressType\": \"<string>\",\n  \"proposalId\": \"95b11417-f18f-457f-8804-68e361f9164f\",\n  \"shareSetId\": \"95b11417-f18f-457f-8804-68e361f9164f\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"exportId\": \"<string>\",\n  \"addressType\": \"<string>\",\n  \"proposalId\": \"95b11417-f18f-457f-8804-68e361f9164f\",\n  \"shareSetId\": \"95b11417-f18f-457f-8804-68e361f9164f\"\n}"

response = http.request(request)
puts response.read_body

{
  "roomId": "<string>",
  "serverKeygenIds": [
    "<string>"
  ],
  "newServerKeygenIds": [
    "<string>"
  ],
  "walletId": "95b11417-f18f-457f-8804-68e361f9164f",
  "accountAddress": "<string>",
  "encryptedWalletApiKey": {
    "alg": "An example name",
    "iv": "An example name",
    "ct": "<string>",
    "tag": "An example name",
    "ek": "<string>",
    "kid": "An example name"
  },
  "shareSetId": "95b11417-f18f-457f-8804-68e361f9164f",
  "shareSetType": "delegated"
}

{
  "error": "<string>"
}

{
  "error": "No jwt provided!"
}

{
  "error": "Access Forbidden",
  "code": "sanctions_blocked"
}

{
  "error": "Conflict: invalid state transition"
}

{
  "error": "Internal Server Error"
}

POST

sdk

{environmentId}

waas

{walletId}

privateKey

export

Export a WAAS wallet private key

curl --request POST \
  --url https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "exportId": "<string>",
  "addressType": "<string>",
  "proposalId": "95b11417-f18f-457f-8804-68e361f9164f",
  "shareSetId": "95b11417-f18f-457f-8804-68e361f9164f"
}
'

import requests

url = "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export"

payload = {
    "exportId": "<string>",
    "addressType": "<string>",
    "proposalId": "95b11417-f18f-457f-8804-68e361f9164f",
    "shareSetId": "95b11417-f18f-457f-8804-68e361f9164f"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    exportId: '<string>',
    addressType: '<string>',
    proposalId: '95b11417-f18f-457f-8804-68e361f9164f',
    shareSetId: '95b11417-f18f-457f-8804-68e361f9164f'
  })
};

fetch('https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'exportId' => '<string>',
    'addressType' => '<string>',
    'proposalId' => '95b11417-f18f-457f-8804-68e361f9164f',
    'shareSetId' => '95b11417-f18f-457f-8804-68e361f9164f'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export"

	payload := strings.NewReader("{\n  \"exportId\": \"<string>\",\n  \"addressType\": \"<string>\",\n  \"proposalId\": \"95b11417-f18f-457f-8804-68e361f9164f\",\n  \"shareSetId\": \"95b11417-f18f-457f-8804-68e361f9164f\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"exportId\": \"<string>\",\n  \"addressType\": \"<string>\",\n  \"proposalId\": \"95b11417-f18f-457f-8804-68e361f9164f\",\n  \"shareSetId\": \"95b11417-f18f-457f-8804-68e361f9164f\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/waas/{walletId}/privateKey/export")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"exportId\": \"<string>\",\n  \"addressType\": \"<string>\",\n  \"proposalId\": \"95b11417-f18f-457f-8804-68e361f9164f\",\n  \"shareSetId\": \"95b11417-f18f-457f-8804-68e361f9164f\"\n}"

response = http.request(request)
puts response.read_body

{
  "roomId": "<string>",
  "serverKeygenIds": [
    "<string>"
  ],
  "newServerKeygenIds": [
    "<string>"
  ],
  "walletId": "95b11417-f18f-457f-8804-68e361f9164f",
  "accountAddress": "<string>",
  "encryptedWalletApiKey": {
    "alg": "An example name",
    "iv": "An example name",
    "ct": "<string>",
    "tag": "An example name",
    "ek": "<string>",
    "kid": "An example name"
  },
  "shareSetId": "95b11417-f18f-457f-8804-68e361f9164f",
  "shareSetType": "delegated"
}

{
  "error": "<string>"
}

{
  "error": "No jwt provided!"
}

{
  "error": "Access Forbidden",
  "code": "sanctions_blocked"
}

{
  "error": "Conflict: invalid state transition"
}

{
  "error": "Internal Server Error"
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

environmentId

string

required

ID of the environment

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

walletId

string

required

UUID of the wallet

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

Body

application/json

Export Private Key Request

exportId

string

required

Unique identifier for the export session

addressType

string

Address derivation type of the wallet to export

proposalId

string

The approved export proposal being redeemed. Required when the wallet's policy requires approvals to export; the export call returns it once the proposal is open.

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

approvalQuorum

object

The initiator's signed export Intent, sent with the export call. When the wallet's policy needs approvals, the call answers with a proposal to approve instead of starting the export.

Show child attributes

Optional identifier of the share set this operation targets. When omitted, the active rootUser share set for walletId is resolved server-side (backwards-compat fallback for older SDKs).

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

Response

Successfully created a room for wallet private key export ceremony

roomId

string

required

Unique identifier of the opened MPC room

serverKeygenIds

string[]

required

List of existing server-side key generation identifiers

A base58 string with a max length of 100 characters

Maximum string length: 100

Pattern: ^[1-9A-HJ-NP-Za-km-z]+$

newServerKeygenIds

string[]

List of newly generated server-side key generation identifiers

A base58 string with a max length of 100 characters

Maximum string length: 100

Pattern: ^[1-9A-HJ-NP-Za-km-z]+$

walletId

string

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

accountAddress

string

Public address of the wallet produced by this ceremony.

encryptedWalletApiKey

object

Present only on a create that set delegateToProjectEnvironment. Inherited by RefreshKeySharesResponse through this schema, where it is never set.

Show child attributes

Identifier of the new share set produced by this ceremony.

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

The role this share set plays for the wallet

Available options:

delegated,

rootUser,

server,

businessAccountUser,

offlineRecovery

Last modified on October 14, 2026

Overview

Endpoints

Schemas

Export a WAAS wallet private key

Authorizations

Path Parameters

Body

Response