Coincover Partner API

openapi: 3.2.0
info:
  title: Coincover Partner API
  version: '2026-10-09'
  description: 'GENERATED FROM DOCUMENTATION by API Evangelist on 2026-10-09: 9 operation(s) read from 10 public documentation page(s) (each operation names its page in x-source). This is not the provider''s published contract; Coincover has published no machine-readable contract that the pipeline could find. Engine: local.'
  x-evidence-tiers:
    code-example: 1
    documentation: 8
    pages-with-code: 1
    pages-read: 10
  x-generated-from: documentation
  x-provenance: generated
  x-authored-by: API Evangelist
  x-generated: '2026-10-09'
  x-generator: generate-contract-from-docs.py
  x-engine: local
  x-sources:
  - https://developer.coincover.com/wallet-provider-recovery/api-integration-guide.md
  - https://developer.coincover.com/partner-guides/bitgo.md
  - https://developer.coincover.com/retail-recovery/testing.md
  - https://developer.coincover.com/retail-recovery/ui-components.md
  - https://developer.coincover.com/institutional-recovery/testing.md
  - https://developer.coincover.com/wallet-provider-recovery/testing.md
  - https://developer.coincover.com/retail-recovery/integration-guide.md
  - https://developer.coincover.com/institutional-recovery/add-a-backup-key.md
  - https://developer.coincover.com/institutional-recovery/back-up-key-material.md
  - https://developer.coincover.com/api-reference/keys/partner--assign-a-new-key-with-environment-specification
servers:
- url: https://service.uat-keys.coincover.com
security:
- bearer: []
tags:
- name: Partner
paths:
  /v1/partner/keys:
    get:
      operationId: get_v1_partner_keys
      tags:
      - Partner
      summary: GET /v1/partner/keys
      x-source: https://developer.coincover.com/api-reference/keys/partner--assign-a-new-key-with-environment-specification
      responses:
        '200':
          description: Success (shape read from the example response on the page)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetV1PartnerKeysResponse'
      x-evidence:
        kind: code-example
        language: curl
        snippet: "curl);\nif ($err) {\n echo \"cURL Error #:\" . $err;\n} else {\n echo $response;\n} package main\nimport (\n \"fmt\"\n \"strings\"\n \"net/http\"\n \"io\"\n)\nfunc main() {\n url := \"https://service.uat-keys.coincover.com/v1/partner/keys\"\n payload := strings.NewReader(\"{\\n \\\"user_identifier\\\": \\\"<string>\\\",\\n \\\"organisation\\\": {\\n \\\"customer_id\\\": \\\"<string>\\\",\\n \\\"customer_name\\\": \\\"<string>\\\"\\n },\\n \\\"package\\\": {\\n \\"
    post:
      operationId: post_v1_partner_keys
      tags:
      - Partner
      summary: Assign a key to a customer
      description: Call POST /v1/partner/keys with an identifier for your customer and your tenant structure. Returns a stable key_id and the public key.
      x-source: https://developer.coincover.com/wallet-provider-recovery/api-integration-guide.md
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PostV1PartnerKeysRequest'
      responses:
        '201':
          description: Success (status as documented)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PostV1PartnerKeysResponse'
      x-evidence:
        kind: documentation
  /v1/partner/secure/{secureid}:
    post:
      operationId: post_v1_partner_secure_secureid
      tags:
      - Partner
      summary: Store encrypted data
      description: Send the ciphertext, the plaintext checksum, and the public key to POST /v1/partner/secure/data.
      x-source: https://developer.coincover.com/wallet-provider-recovery/api-integration-guide.md
      parameters:
      - name: secureid
        in: path
        required: true
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PostV1PartnerSecureSecureidRequest'
      responses:
        '201':
          description: Success (status as documented)
      x-evidence:
        kind: documentation
        collapsed_from: 2 example path(s) differing only at secureId
components:
  schemas:
    GetV1PartnerKeysResponse:
      type: object
      properties:
        key_id:
          type: string
        public_key:
          type: string
        signature:
          type: string
        signed_payload:
          type: string
        signed_fields:
          type: array
          items:
            type: string
        customer_id:
          type: string
        package_id:
          type: string
        metadata:
          type: object
          properties:
            customer_name:
              type: string
            package_name:
              type: string
    PostV1PartnerSecureSecureidRequest:
      type: object
      properties:
        public_key:
          type: string
          description: hex‑encoded public key identifying the storage location
        checksum:
          type: string
          description: SHA‑256 hex of the plaintext
        data:
          type: string
          description: Base64‑encoded ciphertext
        padding_type:
          type: string
          description: '`OAEP`'
        metadata:
          type: object
        metadata.description:
          type: string
        metadata.content_type:
          type: string
        metadata.original_filename:
          type: string
      required:
      - public_key
      - checksum
      - data
    PostV1PartnerKeysRequest:
      type: object
      properties:
        user_identifier:
          type: string
        key_type:
          type: string
          description: e.g. rsa4096
        key_environment:
          type: string
          description: '`HOT` or `COLD`'
        organisation:
          type: object
          description: Customer context
        organisation.customer_id:
          type: string
        organisation.customer_name:
          type: string
        package:
          type: object
          description: Package context
        package.package_id:
          type: string
        package.package_name:
          type: string
        sign_with:
          type: array
          description: Array of field names to bind in the signature
      required:
      - user_identifier
      - key_type
      - key_environment
      - organisation
      - organisation.customer_id
      - organisation.customer_name
      - package
      - package.package_id
      - package.package_name
    PostV1PartnerKeysResponse:
      type: object
      properties:
        key_id:
          type: string
        public_key:
          type: string
          description: hex‑encoded public key
        signature:
          type: string
          description: base64 signature over the public key (and optional fields)
        signed_payload:
          type: string
          description: JCS‑canonical JSON string when `sign_with` is used
        signed_fields:
          type: array
          description: Echo of the fields requested in `sign_with`
  securitySchemes:
    bearer:
      type: http
      scheme: bearer