Migrate SDK Pregen Wallet Share

curl --request POST \
  --url https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --data '
{
  "encryptedPayload": "{\"encryptedData\":\"base64...\",\"ephemeral\":\"base64...\",\"algorithm\":\"ECIES-P256-AES256-SHA256\"}"
}
'

import requests

url = "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share"

payload = { "encryptedPayload": "{\"encryptedData\":\"base64...\",\"ephemeral\":\"base64...\",\"algorithm\":\"ECIES-P256-AES256-SHA256\"}" }
headers = {
    "X-API-Key": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    encryptedPayload: '{"encryptedData":"base64...","ephemeral":"base64...","algorithm":"ECIES-P256-AES256-SHA256"}'
  })
};

fetch('https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'encryptedPayload' => '{"encryptedData":"base64...","ephemeral":"base64...","algorithm":"ECIES-P256-AES256-SHA256"}'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share"

	payload := strings.NewReader("{\n  \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share")
  .header("X-API-Key", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "0a1b2c3d-4e5f-6789-abcd-ef0123456789",
  "type": "EVM",
  "scheme": "DKLS",
  "status": "creating",
  "createdAt": "2024-01-15T09:30:00Z",
  "address": "0x742d35Cc6634C0532925a3b844Bc9e7595f...",
  "publicKey": "<string>",
  "userIdentifier": "alice@example.com",
  "userIdentifierType": "EMAIL"
}

{
  "code": "INVALID_REQUEST",
  "message": "encryptedPayload is required"
}

{
  "code": "UNAUTHORIZED",
  "message": "secret api key not provided"
}

{
  "code": "FORBIDDEN",
  "message": "invalid secret api key"
}

{
  "code": "NOT_FOUND",
  "message": "wallet not found"
}

{
  "code": "CONFLICT",
  "message": "shares already persisted for this wallet"
}

{
  "code": "RATE_LIMITED",
  "message": "Rate limit exceeded, try again shortly."
}

{
  "code": "INTERNAL_ERROR",
  "message": "Internal Server Error"
}

Wallets

Migrate SDK Pregen Wallet Share

Migrate an SDK-pregenerated wallet to the REST API by persisting its user share in Para’s hardware-isolated enclave.

The request body must contain an encryptedPayload — the user share encrypted with the enclave’s P-256 public key using ECIES. The SDK’s migrateWalletShare() method handles encryption automatically. Non-SDK callers must implement ECIES-P256 encryption using the key from GET /v1/enclave/public-key.

After migration the wallet’s sharesPersisted flag becomes true and the wallet can be used with all REST API signing endpoints (sign-raw, sign-transaction, sign-message, sign-typed-data, transfer).

Migration is additive — the original SDK signing flow continues to work.

POST

wallets

{walletId}

migrate-share

Migrate SDK Pregen Wallet Share

curl --request POST \
  --url https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share \
  --header 'Content-Type: application/json' \
  --header 'X-API-Key: <api-key>' \
  --data '
{
  "encryptedPayload": "{\"encryptedData\":\"base64...\",\"ephemeral\":\"base64...\",\"algorithm\":\"ECIES-P256-AES256-SHA256\"}"
}
'

import requests

url = "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share"

payload = { "encryptedPayload": "{\"encryptedData\":\"base64...\",\"ephemeral\":\"base64...\",\"algorithm\":\"ECIES-P256-AES256-SHA256\"}" }
headers = {
    "X-API-Key": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    encryptedPayload: '{"encryptedData":"base64...","ephemeral":"base64...","algorithm":"ECIES-P256-AES256-SHA256"}'
  })
};

fetch('https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'encryptedPayload' => '{"encryptedData":"base64...","ephemeral":"base64...","algorithm":"ECIES-P256-AES256-SHA256"}'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share"

	payload := strings.NewReader("{\n  \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share")
  .header("X-API-Key", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}"

response = http.request(request)
puts response.read_body

{
  "id": "0a1b2c3d-4e5f-6789-abcd-ef0123456789",
  "type": "EVM",
  "scheme": "DKLS",
  "status": "creating",
  "createdAt": "2024-01-15T09:30:00Z",
  "address": "0x742d35Cc6634C0532925a3b844Bc9e7595f...",
  "publicKey": "<string>",
  "userIdentifier": "alice@example.com",
  "userIdentifierType": "EMAIL"
}

{
  "code": "INVALID_REQUEST",
  "message": "encryptedPayload is required"
}

{
  "code": "UNAUTHORIZED",
  "message": "secret api key not provided"
}

{
  "code": "FORBIDDEN",
  "message": "invalid secret api key"
}

{
  "code": "NOT_FOUND",
  "message": "wallet not found"
}

{
  "code": "CONFLICT",
  "message": "shares already persisted for this wallet"
}

{
  "code": "RATE_LIMITED",
  "message": "Rate limit exceeded, try again shortly."
}

{
  "code": "INTERNAL_ERROR",
  "message": "Internal Server Error"
}

Authorizations

X-API-Key

string

header

default:sk_your_secret_key_here

required

Your partner secret key (server-side only)

Headers

X-Request-Id

string<uuid>

UUID for request tracing. Para returns one if omitted.

Path Parameters

walletId

string

required

Wallet ID

Example:

"0a1b2c3d-4e5f-6789-abcd-ef0123456789"

Body

application/json

encryptedPayload

string

required

JSON string containing the ECIES-encrypted user share. The SDK's migrateWalletShare() method produces this automatically. Non-SDK callers must encrypt the share with the enclave's P-256 public key (from GET /v1/enclave/public-key) using ECIES-P256-AES256-SHA256.

Example:

"{\"encryptedData\":\"base64...\",\"ephemeral\":\"base64...\",\"algorithm\":\"ECIES-P256-AES256-SHA256\"}"

Response

Wallet migrated successfully

string<uuid>

required

Unique wallet identifier

Example:

"0a1b2c3d-4e5f-6789-abcd-ef0123456789"

type

enum<string>

required

Blockchain network type

Available options:

EVM,

SOLANA,

COSMOS,

STELLAR,

SUI

Example:

"EVM"

scheme

enum<string>

required

Signature scheme

Available options:

DKLS,

CGGMP,

ED25519

Example:

"DKLS"

status

enum<string>

required

Wallet creation status

Available options:

creating,

ready

createdAt

string<date-time>

required

ISO 8601 timestamp

Example:

"2024-01-15T09:30:00Z"

address

string

Wallet address. Present when status is ready, omitted otherwise.

Example:

"0x742d35Cc6634C0532925a3b844Bc9e7595f..."

publicKey

string

Public key. Present when status is ready, omitted otherwise.

userIdentifier

string

The user identifier associated with this wallet

Example:

"alice@example.com"

userIdentifierType

enum<string>

Type of user identifier

Available options:

EMAIL,

PHONE,

CUSTOM_ID,

GUEST_ID,

DISCORD,

TWITTER,

TELEGRAM,

FARCASTER

⌘I

Getting Started

Guides

Endpoints

Migrate SDK Pregen Wallet Share

Authorizations

Headers

Path Parameters

Body

Response