> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dynamic.xyz/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Delegated Access Setup

> Enable delegated access and configure your webhook endpoint and encryption keys.

## Enable and set defaults

In the developer dashboard, navigate to [Embedded Wallets → Delegated Access](https://app.dynamic.xyz/dashboard/embedded-wallets/dynamic#embeddedwallets-delegated-access) and toggle on "Delegated Access".

Recommended defaults:

* Prompt users on sign in: ON (auto-prompt users on their next sign in)
* Require delegation: OFF (let users skip; enforce later in your app if needed)

## Provide encryption key (server)

Dynamic encrypts the delegated materials before sending to your server using a hybrid approach using RSA and AES. Provide your public key, or let Dynamic generate a key pair for you.

## Register your Delegated Access endpoint (server)

Provide a verified HTTPS URL that receives `wallet.delegation.created` (and `wallet.delegation.revoked`).

After adding the URL, we send a ping to verify reachability. View events in the Webhooks section of the dashboard.

When a user approves delegation, your endpoint receives `wallet.delegation.created` with encrypted materials under `data`. Verify the signature and store securely. See Receiving for payload and decryption.

<Info>
  Before processing any webhook, verify signatures. Dynamic sends a signature in the `x-dynamic-signature-256` header. Compute HMAC-SHA256 of the raw request body with your webhook secret (from the webhook detail page in the dashboard) and compare with the header value using a constant-time comparison. The payload you hash must match exactly as received.
</Info>

Example (Node):

```typescript theme={"system"}
import * as crypto from "crypto";

export const verifySignature = ({
  secret,
  signature,
  payload,
}: { secret: string; signature: string; payload: any }) => {
  const payloadSignature = crypto
    .createHmac("sha256", secret)
    .update(JSON.stringify(payload))
    .digest("hex");
  const trusted = Buffer.from(`sha256=${payloadSignature}`, "ascii");
  const untrusted = Buffer.from(signature, "ascii");
  return crypto.timingSafeEqual(trusted, untrusted);
};
```

## Trigger delegation from your app

Once setup is complete, choose your SDK to learn how to trigger delegation and use delegated materials:

<CardGroup cols={2}>
  <Card title="React" icon="react" color="#4779FE" href="/react/wallets/embedded-wallets/mpc/delegated-access/triggering-delegation">
    Trigger delegation and perform developer actions
  </Card>

  <Card title="JavaScript" icon="js" color="#4779FE" href="/javascript/wallets/embedded-wallets/mpc/delegated-access/triggering-delegation">
    Trigger delegation and perform developer actions
  </Card>

  <Card title="React Native" icon="mobile" color="#4779FE" href="/react-native/wallets/embedded-wallets/mpc/delegated-access/triggering-delegation">
    Trigger delegation and perform developer actions
  </Card>

  <Card title="Swift" icon="apple" color="#4779FE" href="/swift/wallets/embedded-wallets/mpc/delegated-access/triggering-delegation">
    Trigger delegation and perform developer actions
  </Card>

  <Card title="Kotlin" icon="android" color="#4779FE" href="/kotlin/wallets/embedded-wallets/mpc/delegated-access/triggering-delegation">
    Trigger delegation and perform developer actions
  </Card>

  <Card title="Flutter" icon="mobile-screen" color="#4779FE" href="/flutter/wallets/embedded-wallets/mpc/delegated-access/triggering-delegation">
    Trigger delegation and perform developer actions
  </Card>

  <Card title="Unity" icon="unity" color="#4779FE" href="/unity/wallets/embedded-wallets/mpc/delegated-access/triggering-delegation">
    Trigger delegation and perform developer actions
  </Card>
</CardGroup>