SDK — remove a signer from a wallet in a business account

Severs the signer’s MPC pair on this wallet by soft-deleting the server share + the share set + the signer row in one transaction. No reshare ceremony is run — surviving signers’ share sets are independent MPC pairs and remain intact.

Authorization is enforced by auth-service — owner or admin by default, wider if the account’s governance sets eligibleInitiatorRoles for removeSignerFromWallet. Returns 409 if removing the signer would leave the wallet with zero active signers.

DELETE

sdk

{environmentId}

businessAccounts

{businessAccountId}

wallets

{walletId}

signers

{signerId}

SDK — remove a signer from a wallet in a business account

curl --request DELETE \
  --url https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "autoExecute": true,
  "intent": {},
  "intentSignature": "<string>"
}
'

import requests

url = "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}"

payload = {
    "autoExecute": True,
    "intent": {},
    "intentSignature": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.delete(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'DELETE',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({autoExecute: true, intent: {}, intentSignature: '<string>'})
};

fetch('https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "DELETE",
  CURLOPT_POSTFIELDS => json_encode([
    'autoExecute' => true,
    'intent' => [
        
    ],
    'intentSignature' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}"

	payload := strings.NewReader("{\n  \"autoExecute\": true,\n  \"intent\": {},\n  \"intentSignature\": \"<string>\"\n}")

	req, _ := http.NewRequest("DELETE", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.delete("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"autoExecute\": true,\n  \"intent\": {},\n  \"intentSignature\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Delete.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"autoExecute\": true,\n  \"intent\": {},\n  \"intentSignature\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "signer": {
    "id": "95b11417-f18f-457f-8804-68e361f9164f",
    "businessAccountId": "95b11417-f18f-457f-8804-68e361f9164f",
    "walletId": "95b11417-f18f-457f-8804-68e361f9164f",
    "type": "endUser",
    "userId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "shareSetId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "derivedFromUserId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "apiKeyIdentityRef": "<string>",
    "expiresAt": "2023-11-07T05:31:56Z",
    "revokedAt": "2023-11-07T05:31:56Z",
    "createdAt": "2023-11-07T05:31:56Z"
  }
}

{
  "reason": "INTENT_REQUIRED",
  "intent": {},
  "message": "This proposal cannot be executed yet: addMember needs 1 more approval (1 of 2).",
  "proposalId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "approvalRequirements": [
    {
      "action": "addMember",
      "requirementId": "<string>",
      "required": 123,
      "approved": 123,
      "satisfied": true,
      "unmetMandatoryRoles": [
        "<string>"
      ]
    }
  ]
}

{
  "error": "<string>"
}

{
  "error": "No jwt provided!"
}

{
  "error": "Access Forbidden",
  "approvalRequirements": [
    {
      "action": "addMember",
      "requirementId": "<string>",
      "required": 123,
      "approved": 123,
      "satisfied": true,
      "unmetMandatoryRoles": [
        "<string>"
      ]
    }
  ]
}

{
  "error": "Not Found",
  "code": "not_found"
}

{
  "error": "Conflict: invalid state transition"
}

{
  "error": "Internal Server Error"
}

Authorizations

Authorization

string

header

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

environmentId

string

required

ID of the environment

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

businessAccountId

string

required

ID of the business account

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

walletId

string

required

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

signerId

string

required

Required string length: 36

Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$

Example:

"95b11417-f18f-457f-8804-68e361f9164f"

Body

application/json

SDK removeSigner body. Only the approval artifacts — the signer comes from the path. Send nothing when the account does not govern removeSignerFromWallet.

autoExecute

boolean

default:true

Whether the change applies the moment its quorum is met, or waits for an explicit execute. Read only on the first call, where it is stamped into the intent you sign; after that the signed intent is the authority. Defaults to true, because a change holding all its consent while waiting for a button press tends to be forgotten, and the deadline covers execution too.

intent

object

The initiator's proposal, signed with their session key. Built by the API, not the client — sign these exact bytes verbatim, because re-serializing can change them and invalidate the signature. autoExecute is inside the signed bytes, so an approver consents to it and nothing can flip it afterwards.

intentSignature

string

Hex-encoded ECDSA P-256 signature over the canonicalized payload, produced by the signer's session key — which never leaves their device, so consent cannot be given on their behalf. Exactly 128 hex characters. WebCrypto emits the raw r‖s form with both halves padded to 32 bytes, so unlike DER the length never varies. Constrained here so a malformed value is a 400 at the edge rather than an enclave round trip that returns INTENT_SIGNATURE_INVALID, and so an unbounded string cannot be persisted against a proposal.

Pattern: ^[0-9a-fA-F]{128}$

Response

Signer removed

signer

object

required

Signing-reach assignment (per signer-wallet pair)

Show child attributes

Last modified on September 14, 2026

⌘I

SDK — remove a signer from a wallet in a business account

curl --request DELETE \
  --url https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "autoExecute": true,
  "intent": {},
  "intentSignature": "<string>"
}
'

import requests

url = "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}"

payload = {
    "autoExecute": True,
    "intent": {},
    "intentSignature": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.delete(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'DELETE',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({autoExecute: true, intent: {}, intentSignature: '<string>'})
};

fetch('https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "DELETE",
  CURLOPT_POSTFIELDS => json_encode([
    'autoExecute' => true,
    'intent' => [
        
    ],
    'intentSignature' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}"

	payload := strings.NewReader("{\n  \"autoExecute\": true,\n  \"intent\": {},\n  \"intentSignature\": \"<string>\"\n}")

	req, _ := http.NewRequest("DELETE", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.delete("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"autoExecute\": true,\n  \"intent\": {},\n  \"intentSignature\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://app.dynamicauth.com/api/v0/sdk/{environmentId}/businessAccounts/{businessAccountId}/wallets/{walletId}/signers/{signerId}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Delete.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"autoExecute\": true,\n  \"intent\": {},\n  \"intentSignature\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "signer": {
    "id": "95b11417-f18f-457f-8804-68e361f9164f",
    "businessAccountId": "95b11417-f18f-457f-8804-68e361f9164f",
    "walletId": "95b11417-f18f-457f-8804-68e361f9164f",
    "type": "endUser",
    "userId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "shareSetId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "derivedFromUserId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "apiKeyIdentityRef": "<string>",
    "expiresAt": "2023-11-07T05:31:56Z",
    "revokedAt": "2023-11-07T05:31:56Z",
    "createdAt": "2023-11-07T05:31:56Z"
  }
}

{
  "reason": "INTENT_REQUIRED",
  "intent": {},
  "message": "This proposal cannot be executed yet: addMember needs 1 more approval (1 of 2).",
  "proposalId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "approvalRequirements": [
    {
      "action": "addMember",
      "requirementId": "<string>",
      "required": 123,
      "approved": 123,
      "satisfied": true,
      "unmetMandatoryRoles": [
        "<string>"
      ]
    }
  ]
}

{
  "error": "<string>"
}

{
  "error": "No jwt provided!"
}

{
  "error": "Access Forbidden",
  "approvalRequirements": [
    {
      "action": "addMember",
      "requirementId": "<string>",
      "required": 123,
      "approved": 123,
      "satisfied": true,
      "unmetMandatoryRoles": [
        "<string>"
      ]
    }
  ]
}

{
  "error": "Not Found",
  "code": "not_found"
}

{
  "error": "Conflict: invalid state transition"
}

{
  "error": "Internal Server Error"
}

Overview

Endpoints

Schemas

SDK — remove a signer from a wallet in a business account

Authorizations

Path Parameters

Body

Response