curl --request POST \
--url https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization \
--header 'Content-Type: application/json' \
--header 'X-API-Key: <api-key>' \
--data '
{
"authorization": {
"address": "0x1234567890abcdef1234567890abcdef12345678",
"chainId": 1,
"nonce": 0,
"contractAddress": "0x1234567890abcdef1234567890abcdef12345678"
}
}
'import requests
url = "https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization"
payload = { "authorization": {
"address": "0x1234567890abcdef1234567890abcdef12345678",
"chainId": 1,
"nonce": 0,
"contractAddress": "0x1234567890abcdef1234567890abcdef12345678"
} }
headers = {
"X-API-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
authorization: {
address: '0x1234567890abcdef1234567890abcdef12345678',
chainId: 1,
nonce: 0,
contractAddress: '0x1234567890abcdef1234567890abcdef12345678'
}
})
};
fetch('https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'authorization' => [
'address' => '0x1234567890abcdef1234567890abcdef12345678',
'chainId' => 1,
'nonce' => 0,
'contractAddress' => '0x1234567890abcdef1234567890abcdef12345678'
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization"
payload := strings.NewReader("{\n \"authorization\": {\n \"address\": \"0x1234567890abcdef1234567890abcdef12345678\",\n \"chainId\": 1,\n \"nonce\": 0,\n \"contractAddress\": \"0x1234567890abcdef1234567890abcdef12345678\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("X-API-Key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization")
.header("X-API-Key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"authorization\": {\n \"address\": \"0x1234567890abcdef1234567890abcdef12345678\",\n \"chainId\": 1,\n \"nonce\": 0,\n \"contractAddress\": \"0x1234567890abcdef1234567890abcdef12345678\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"authorization\": {\n \"address\": \"0x1234567890abcdef1234567890abcdef12345678\",\n \"chainId\": 1,\n \"nonce\": 0,\n \"contractAddress\": \"0x1234567890abcdef1234567890abcdef12345678\"\n }\n}"
response = http.request(request)
puts response.read_body{
"address": "0x1234567890abcdef1234567890abcdef12345678",
"chainId": 1,
"nonce": 0,
"r": "0xa1b2c3...",
"s": "0xd4e5f6...",
"yParity": 0,
"signature": "a1b2c3d4e5f6..."
}{
"code": "INVALID_REQUEST",
"message": "type must be one of EVM, SOLANA, COSMOS, STELLAR, SUI"
}{
"code": "UNAUTHORIZED",
"message": "secret api key not provided"
}{
"code": "FORBIDDEN",
"message": "invalid secret api key"
}{
"code": "NOT_FOUND",
"message": "wallet not found"
}{
"code": "CONFLICT",
"message": "A request with this idempotency key is currently being processed"
}{
"code": "UNPROCESSABLE",
"message": "Idempotency key has already been used with different request parameters"
}{
"code": "RATE_LIMITED",
"message": "Rate limit exceeded, try again shortly."
}{
"code": "INTERNAL_ERROR",
"message": "Internal Server Error"
}Sign Authorization (EIP-7702)
Signs an EIP-7702 authorization for account delegation. Only supported for EVM wallets.
EIP-7702 allows an EOA to delegate execution to a smart contract address for a single transaction, enabling features like gas sponsorship and batched calls without migrating to a new contract wallet address. This is used by account abstraction providers such as ZeroDev, Alchemy, Pimlico, and others operating in 7702 mode.
The endpoint computes the authorization hash per EIP-7702
(keccak256(0x05 || rlp([chainId, address, nonce]))), signs it via MPC,
and returns the decomposed signature with yParity (0 or 1) — not
the legacy v (27/28) used by other signing endpoints.
Provide at least one of address or contractAddress as the delegation
target. Both are accepted; when both are supplied, contractAddress takes
precedence.
curl --request POST \
--url https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization \
--header 'Content-Type: application/json' \
--header 'X-API-Key: <api-key>' \
--data '
{
"authorization": {
"address": "0x1234567890abcdef1234567890abcdef12345678",
"chainId": 1,
"nonce": 0,
"contractAddress": "0x1234567890abcdef1234567890abcdef12345678"
}
}
'import requests
url = "https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization"
payload = { "authorization": {
"address": "0x1234567890abcdef1234567890abcdef12345678",
"chainId": 1,
"nonce": 0,
"contractAddress": "0x1234567890abcdef1234567890abcdef12345678"
} }
headers = {
"X-API-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
authorization: {
address: '0x1234567890abcdef1234567890abcdef12345678',
chainId: 1,
nonce: 0,
contractAddress: '0x1234567890abcdef1234567890abcdef12345678'
}
})
};
fetch('https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'authorization' => [
'address' => '0x1234567890abcdef1234567890abcdef12345678',
'chainId' => 1,
'nonce' => 0,
'contractAddress' => '0x1234567890abcdef1234567890abcdef12345678'
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization"
payload := strings.NewReader("{\n \"authorization\": {\n \"address\": \"0x1234567890abcdef1234567890abcdef12345678\",\n \"chainId\": 1,\n \"nonce\": 0,\n \"contractAddress\": \"0x1234567890abcdef1234567890abcdef12345678\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("X-API-Key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization")
.header("X-API-Key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"authorization\": {\n \"address\": \"0x1234567890abcdef1234567890abcdef12345678\",\n \"chainId\": 1,\n \"nonce\": 0,\n \"contractAddress\": \"0x1234567890abcdef1234567890abcdef12345678\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.beta.getpara.com/v1/wallets/{walletId}/sign-authorization")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"authorization\": {\n \"address\": \"0x1234567890abcdef1234567890abcdef12345678\",\n \"chainId\": 1,\n \"nonce\": 0,\n \"contractAddress\": \"0x1234567890abcdef1234567890abcdef12345678\"\n }\n}"
response = http.request(request)
puts response.read_body{
"address": "0x1234567890abcdef1234567890abcdef12345678",
"chainId": 1,
"nonce": 0,
"r": "0xa1b2c3...",
"s": "0xd4e5f6...",
"yParity": 0,
"signature": "a1b2c3d4e5f6..."
}{
"code": "INVALID_REQUEST",
"message": "type must be one of EVM, SOLANA, COSMOS, STELLAR, SUI"
}{
"code": "UNAUTHORIZED",
"message": "secret api key not provided"
}{
"code": "FORBIDDEN",
"message": "invalid secret api key"
}{
"code": "NOT_FOUND",
"message": "wallet not found"
}{
"code": "CONFLICT",
"message": "A request with this idempotency key is currently being processed"
}{
"code": "UNPROCESSABLE",
"message": "Idempotency key has already been used with different request parameters"
}{
"code": "RATE_LIMITED",
"message": "Rate limit exceeded, try again shortly."
}{
"code": "INTERNAL_ERROR",
"message": "Internal Server Error"
}Authorizations
Your partner secret key (server-side only)
Headers
UUID for request tracing. Para returns one if omitted.
Unique key for safe retries on POST endpoints. If a request with the same key is received within 24 hours, the original response is returned without re-executing. Recommended format: UUID v4. Max length 256 characters. Returns 422 if the same key is reused with a different request body. Returns 409 if a request with the same key is still being processed.
256Path Parameters
Wallet UUID. A malformed or inaccessible wallet ID returns 404.
"0a1b2c3d-4e5f-6789-abcd-ef0123456789"
Body
Provide address or contractAddress as the delegation target. If both are supplied, contractAddress is used.
- Option 1
- Option 2
Show child attributes
Show child attributes
Response
Signed authorization
Contract address the authorization delegates to.
"0x1234567890abcdef1234567890abcdef12345678"
Chain ID from the authorization.
1
Nonce from the authorization.
0
ECDSA signature r component (hex with 0x prefix).
"0xa1b2c3..."
ECDSA signature s component (hex with 0x prefix).
"0xd4e5f6..."
EIP-7702 parity bit (0 or 1). Unlike other signing endpoints that return v (27/28), this uses yParity per the EIP-7702 spec.
0, 1 0
Raw hex-encoded 65-byte signature without 0x prefix (r + s + v).
"a1b2c3d4e5f6..."