curl --request POST \
--url https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share \
--header 'Content-Type: application/json' \
--header 'X-API-Key: <api-key>' \
--data '
{
"encryptedPayload": "{\"encryptedData\":\"base64...\",\"ephemeral\":\"base64...\",\"algorithm\":\"ECIES-P256-AES256-SHA256\"}"
}
'import requests
url = "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share"
payload = { "encryptedPayload": "{\"encryptedData\":\"base64...\",\"ephemeral\":\"base64...\",\"algorithm\":\"ECIES-P256-AES256-SHA256\"}" }
headers = {
"X-API-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
encryptedPayload: '{"encryptedData":"base64...","ephemeral":"base64...","algorithm":"ECIES-P256-AES256-SHA256"}'
})
};
fetch('https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'encryptedPayload' => '{"encryptedData":"base64...","ephemeral":"base64...","algorithm":"ECIES-P256-AES256-SHA256"}'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share"
payload := strings.NewReader("{\n \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("X-API-Key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share")
.header("X-API-Key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}"
response = http.request(request)
puts response.read_body{
"id": "0a1b2c3d-4e5f-6789-abcd-ef0123456789",
"type": "EVM",
"scheme": "DKLS",
"status": "creating",
"createdAt": "2024-01-15T09:30:00Z",
"address": "0x742d35Cc6634C0532925a3b844Bc9e7595f...",
"publicKey": "<string>",
"userIdentifier": "alice@example.com",
"userIdentifierType": "EMAIL"
}{
"code": "INVALID_REQUEST",
"message": "encryptedPayload is required"
}{
"code": "UNAUTHORIZED",
"message": "secret api key not provided"
}{
"code": "FORBIDDEN",
"message": "REST API share migration is only supported for API-created wallets"
}{
"code": "NOT_FOUND",
"message": "wallet not found"
}{
"code": "CONFLICT",
"message": "shares already persisted for this wallet"
}{
"code": "RATE_LIMITED",
"message": "Rate limit exceeded, try again shortly."
}{
"code": "INTERNAL_ERROR",
"message": "Internal Server Error"
}Migrate SDK Pregen Wallet Share
Migrate an SDK-pregenerated wallet to the REST API by persisting its user share in Para’s hardware-isolated enclave.
The request body must contain an encryptedPayload — the user share encrypted with
the enclave’s P-256 public key using ECIES. The SDK’s migrateWalletShare() method
handles encryption automatically. Non-SDK callers must implement ECIES-P256 encryption
using the key from GET /v1/enclave/public-key.
After migration the wallet’s sharesPersisted flag becomes true and the wallet
can use the REST routes supported by its type: sign-raw and sign-message support
all five wallet types; sign-transaction supports EVM, Solana, Stellar, and Sui;
sign-typed-data and sign-authorization are EVM-only; transfer and
estimate-fee support EVM and Solana.
Migration is additive. The original SDK signing flow continues to work.
curl --request POST \
--url https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share \
--header 'Content-Type: application/json' \
--header 'X-API-Key: <api-key>' \
--data '
{
"encryptedPayload": "{\"encryptedData\":\"base64...\",\"ephemeral\":\"base64...\",\"algorithm\":\"ECIES-P256-AES256-SHA256\"}"
}
'import requests
url = "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share"
payload = { "encryptedPayload": "{\"encryptedData\":\"base64...\",\"ephemeral\":\"base64...\",\"algorithm\":\"ECIES-P256-AES256-SHA256\"}" }
headers = {
"X-API-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'X-API-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
encryptedPayload: '{"encryptedData":"base64...","ephemeral":"base64...","algorithm":"ECIES-P256-AES256-SHA256"}'
})
};
fetch('https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'encryptedPayload' => '{"encryptedData":"base64...","ephemeral":"base64...","algorithm":"ECIES-P256-AES256-SHA256"}'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share"
payload := strings.NewReader("{\n \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("X-API-Key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share")
.header("X-API-Key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.beta.getpara.com/v1/wallets/{walletId}/migrate-share")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"encryptedPayload\": \"{\\\"encryptedData\\\":\\\"base64...\\\",\\\"ephemeral\\\":\\\"base64...\\\",\\\"algorithm\\\":\\\"ECIES-P256-AES256-SHA256\\\"}\"\n}"
response = http.request(request)
puts response.read_body{
"id": "0a1b2c3d-4e5f-6789-abcd-ef0123456789",
"type": "EVM",
"scheme": "DKLS",
"status": "creating",
"createdAt": "2024-01-15T09:30:00Z",
"address": "0x742d35Cc6634C0532925a3b844Bc9e7595f...",
"publicKey": "<string>",
"userIdentifier": "alice@example.com",
"userIdentifierType": "EMAIL"
}{
"code": "INVALID_REQUEST",
"message": "encryptedPayload is required"
}{
"code": "UNAUTHORIZED",
"message": "secret api key not provided"
}{
"code": "FORBIDDEN",
"message": "REST API share migration is only supported for API-created wallets"
}{
"code": "NOT_FOUND",
"message": "wallet not found"
}{
"code": "CONFLICT",
"message": "shares already persisted for this wallet"
}{
"code": "RATE_LIMITED",
"message": "Rate limit exceeded, try again shortly."
}{
"code": "INTERNAL_ERROR",
"message": "Internal Server Error"
}Authorizations
Your partner secret key (server-side only)
Headers
UUID for request tracing. Para returns one if omitted.
For sponsored transfers, use the durable behavior documented on POST /transfer.
Other POST endpoints use this key for safe retries. If a request with the same key
is received within 24 hours, the original response is returned without re-executing.
Recommended format: UUID v4. Max length 256 characters.
Returns 422 if the same key is reused with a different request body.
Returns 409 if a request with the same key is still being processed.
Replays return the original response, not the latest chain outcome. For a persisted broadcast,
use the returned transactionId with GET transaction history to track its current status.
256Path Parameters
Wallet UUID. A malformed or inaccessible wallet ID returns 404.
"0a1b2c3d-4e5f-6789-abcd-ef0123456789"
Body
JSON string containing the ECIES-encrypted user share. The SDK's
migrateWalletShare() method produces this automatically. Non-SDK
callers must encrypt the share with the enclave's P-256 public key
(from GET /v1/enclave/public-key) using ECIES-P256-AES256-SHA256.
The value must contain a non-whitespace character and cannot exceed
64,000 characters.
1 - 64000\S"{\"encryptedData\":\"base64...\",\"ephemeral\":\"base64...\",\"algorithm\":\"ECIES-P256-AES256-SHA256\"}"
Response
Wallet migrated successfully
Unique wallet identifier
"0a1b2c3d-4e5f-6789-abcd-ef0123456789"
Blockchain network type
EVM, SOLANA, COSMOS, STELLAR, SUI "EVM"
Signature scheme
DKLS, CGGMP, ED25519 "DKLS"
creating until key generation completes; ready after it completes. address and publicKey can be present while status is creating.
creating, ready ISO 8601 timestamp
"2024-01-15T09:30:00Z"
Wallet address. It can be present while status is creating.
"0x742d35Cc6634C0532925a3b844Bc9e7595f..."
Public key. It can be present while status is creating.
The user identifier associated with this wallet
"alice@example.com"
Type of user identifier
EMAIL, PHONE, CUSTOM_ID, GUEST_ID, DISCORD, TWITTER, TELEGRAM, FARCASTER