Create Delegated Signer

curl --request POST \
  --url https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers \
  --header 'Content-Type: application/json' \
  --header 'X-API-KEY: <x-api-key>' \
  --data '
{
  "signer": {
    "type": "passkey",
    "id": "cWtP7gmZbd98HbKUuGXx5Q",
    "name": "hgranger",
    "publicKey": {
      "x": "38035223810536273945556366218149112558607829411547667975304293530457502824247",
      "y": "91117823763706733837104303008228095481082989039135234750508288790583476078729"
    }
  },
  "chain": "<unknown>",
  "scopes": {
    "type": "transfer",
    "tokenLocator": "base-sepolia:usdc",
    "spendingLimit": {
      "amount": "10",
      "interval": 86400
    }
  },
  "expiresAt": "2023-11-07T05:31:56Z",
  "deployImmediately": true
}
'

import requests

url = "https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers"

payload = {
    "signer": {
        "type": "passkey",
        "id": "cWtP7gmZbd98HbKUuGXx5Q",
        "name": "hgranger",
        "publicKey": {
            "x": "38035223810536273945556366218149112558607829411547667975304293530457502824247",
            "y": "91117823763706733837104303008228095481082989039135234750508288790583476078729"
        }
    },
    "chain": "<unknown>",
    "scopes": {
        "type": "transfer",
        "tokenLocator": "base-sepolia:usdc",
        "spendingLimit": {
            "amount": "10",
            "interval": 86400
        }
    },
    "expiresAt": "2023-11-07T05:31:56Z",
    "deployImmediately": True
}
headers = {
    "X-API-KEY": "<x-api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'X-API-KEY': '<x-api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    signer: {
      type: 'passkey',
      id: 'cWtP7gmZbd98HbKUuGXx5Q',
      name: 'hgranger',
      publicKey: {
        x: '38035223810536273945556366218149112558607829411547667975304293530457502824247',
        y: '91117823763706733837104303008228095481082989039135234750508288790583476078729'
      }
    },
    chain: '<unknown>',
    scopes: {
      type: 'transfer',
      tokenLocator: 'base-sepolia:usdc',
      spendingLimit: {amount: '10', interval: 86400}
    },
    expiresAt: '2023-11-07T05:31:56Z',
    deployImmediately: true
  })
};

fetch('https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'signer' => [
        'type' => 'passkey',
        'id' => 'cWtP7gmZbd98HbKUuGXx5Q',
        'name' => 'hgranger',
        'publicKey' => [
                'x' => '38035223810536273945556366218149112558607829411547667975304293530457502824247',
                'y' => '91117823763706733837104303008228095481082989039135234750508288790583476078729'
        ]
    ],
    'chain' => '<unknown>',
    'scopes' => [
        'type' => 'transfer',
        'tokenLocator' => 'base-sepolia:usdc',
        'spendingLimit' => [
                'amount' => '10',
                'interval' => 86400
        ]
    ],
    'expiresAt' => '2023-11-07T05:31:56Z',
    'deployImmediately' => true
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-API-KEY: <x-api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers"

	payload := strings.NewReader("{\n  \"signer\": {\n    \"type\": \"passkey\",\n    \"id\": \"cWtP7gmZbd98HbKUuGXx5Q\",\n    \"name\": \"hgranger\",\n    \"publicKey\": {\n      \"x\": \"38035223810536273945556366218149112558607829411547667975304293530457502824247\",\n      \"y\": \"91117823763706733837104303008228095481082989039135234750508288790583476078729\"\n    }\n  },\n  \"chain\": \"<unknown>\",\n  \"scopes\": {\n    \"type\": \"transfer\",\n    \"tokenLocator\": \"base-sepolia:usdc\",\n    \"spendingLimit\": {\n      \"amount\": \"10\",\n      \"interval\": 86400\n    }\n  },\n  \"expiresAt\": \"2023-11-07T05:31:56Z\",\n  \"deployImmediately\": true\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-KEY", "<x-api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers")
  .header("X-API-KEY", "<x-api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"signer\": {\n    \"type\": \"passkey\",\n    \"id\": \"cWtP7gmZbd98HbKUuGXx5Q\",\n    \"name\": \"hgranger\",\n    \"publicKey\": {\n      \"x\": \"38035223810536273945556366218149112558607829411547667975304293530457502824247\",\n      \"y\": \"91117823763706733837104303008228095481082989039135234750508288790583476078729\"\n    }\n  },\n  \"chain\": \"<unknown>\",\n  \"scopes\": {\n    \"type\": \"transfer\",\n    \"tokenLocator\": \"base-sepolia:usdc\",\n    \"spendingLimit\": {\n      \"amount\": \"10\",\n      \"interval\": 86400\n    }\n  },\n  \"expiresAt\": \"2023-11-07T05:31:56Z\",\n  \"deployImmediately\": true\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-KEY"] = '<x-api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"signer\": {\n    \"type\": \"passkey\",\n    \"id\": \"cWtP7gmZbd98HbKUuGXx5Q\",\n    \"name\": \"hgranger\",\n    \"publicKey\": {\n      \"x\": \"38035223810536273945556366218149112558607829411547667975304293530457502824247\",\n      \"y\": \"91117823763706733837104303008228095481082989039135234750508288790583476078729\"\n    }\n  },\n  \"chain\": \"<unknown>\",\n  \"scopes\": {\n    \"type\": \"transfer\",\n    \"tokenLocator\": \"base-sepolia:usdc\",\n    \"spendingLimit\": {\n      \"amount\": \"10\",\n      \"interval\": 86400\n    }\n  },\n  \"expiresAt\": \"2023-11-07T05:31:56Z\",\n  \"deployImmediately\": true\n}"

response = http.request(request)
puts response.read_body

{
  "type": "passkey",
  "id": "cWtP7gmZbd98HbKUuGXx5Q",
  "name": "hgranger",
  "publicKey": {
    "x": "38035223810536273945556366218149112558607829411547667975304293530457502824247",
    "y": "91117823763706733837104303008228095481082989039135234750508288790583476078729"
  },
  "validatorContractVersion": "0.2.0",
  "locator": "passkey:cWtP7gmZbd98HbKUuGXx5Q"
}

{
  "error": true,
  "message": "<error message>",
  "code": "<string>"
}

{
  "error": true,
  "message": "<error message>",
  "code": "<string>"
}

POST

2025-06-09

wallets

{walletLocator}

signers

Create Delegated Signer

curl --request POST \
  --url https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers \
  --header 'Content-Type: application/json' \
  --header 'X-API-KEY: <x-api-key>' \
  --data '
{
  "signer": {
    "type": "passkey",
    "id": "cWtP7gmZbd98HbKUuGXx5Q",
    "name": "hgranger",
    "publicKey": {
      "x": "38035223810536273945556366218149112558607829411547667975304293530457502824247",
      "y": "91117823763706733837104303008228095481082989039135234750508288790583476078729"
    }
  },
  "chain": "<unknown>",
  "scopes": {
    "type": "transfer",
    "tokenLocator": "base-sepolia:usdc",
    "spendingLimit": {
      "amount": "10",
      "interval": 86400
    }
  },
  "expiresAt": "2023-11-07T05:31:56Z",
  "deployImmediately": true
}
'

import requests

url = "https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers"

payload = {
    "signer": {
        "type": "passkey",
        "id": "cWtP7gmZbd98HbKUuGXx5Q",
        "name": "hgranger",
        "publicKey": {
            "x": "38035223810536273945556366218149112558607829411547667975304293530457502824247",
            "y": "91117823763706733837104303008228095481082989039135234750508288790583476078729"
        }
    },
    "chain": "<unknown>",
    "scopes": {
        "type": "transfer",
        "tokenLocator": "base-sepolia:usdc",
        "spendingLimit": {
            "amount": "10",
            "interval": 86400
        }
    },
    "expiresAt": "2023-11-07T05:31:56Z",
    "deployImmediately": True
}
headers = {
    "X-API-KEY": "<x-api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'X-API-KEY': '<x-api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    signer: {
      type: 'passkey',
      id: 'cWtP7gmZbd98HbKUuGXx5Q',
      name: 'hgranger',
      publicKey: {
        x: '38035223810536273945556366218149112558607829411547667975304293530457502824247',
        y: '91117823763706733837104303008228095481082989039135234750508288790583476078729'
      }
    },
    chain: '<unknown>',
    scopes: {
      type: 'transfer',
      tokenLocator: 'base-sepolia:usdc',
      spendingLimit: {amount: '10', interval: 86400}
    },
    expiresAt: '2023-11-07T05:31:56Z',
    deployImmediately: true
  })
};

fetch('https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'signer' => [
        'type' => 'passkey',
        'id' => 'cWtP7gmZbd98HbKUuGXx5Q',
        'name' => 'hgranger',
        'publicKey' => [
                'x' => '38035223810536273945556366218149112558607829411547667975304293530457502824247',
                'y' => '91117823763706733837104303008228095481082989039135234750508288790583476078729'
        ]
    ],
    'chain' => '<unknown>',
    'scopes' => [
        'type' => 'transfer',
        'tokenLocator' => 'base-sepolia:usdc',
        'spendingLimit' => [
                'amount' => '10',
                'interval' => 86400
        ]
    ],
    'expiresAt' => '2023-11-07T05:31:56Z',
    'deployImmediately' => true
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-API-KEY: <x-api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers"

	payload := strings.NewReader("{\n  \"signer\": {\n    \"type\": \"passkey\",\n    \"id\": \"cWtP7gmZbd98HbKUuGXx5Q\",\n    \"name\": \"hgranger\",\n    \"publicKey\": {\n      \"x\": \"38035223810536273945556366218149112558607829411547667975304293530457502824247\",\n      \"y\": \"91117823763706733837104303008228095481082989039135234750508288790583476078729\"\n    }\n  },\n  \"chain\": \"<unknown>\",\n  \"scopes\": {\n    \"type\": \"transfer\",\n    \"tokenLocator\": \"base-sepolia:usdc\",\n    \"spendingLimit\": {\n      \"amount\": \"10\",\n      \"interval\": 86400\n    }\n  },\n  \"expiresAt\": \"2023-11-07T05:31:56Z\",\n  \"deployImmediately\": true\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-KEY", "<x-api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers")
  .header("X-API-KEY", "<x-api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"signer\": {\n    \"type\": \"passkey\",\n    \"id\": \"cWtP7gmZbd98HbKUuGXx5Q\",\n    \"name\": \"hgranger\",\n    \"publicKey\": {\n      \"x\": \"38035223810536273945556366218149112558607829411547667975304293530457502824247\",\n      \"y\": \"91117823763706733837104303008228095481082989039135234750508288790583476078729\"\n    }\n  },\n  \"chain\": \"<unknown>\",\n  \"scopes\": {\n    \"type\": \"transfer\",\n    \"tokenLocator\": \"base-sepolia:usdc\",\n    \"spendingLimit\": {\n      \"amount\": \"10\",\n      \"interval\": 86400\n    }\n  },\n  \"expiresAt\": \"2023-11-07T05:31:56Z\",\n  \"deployImmediately\": true\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-KEY"] = '<x-api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"signer\": {\n    \"type\": \"passkey\",\n    \"id\": \"cWtP7gmZbd98HbKUuGXx5Q\",\n    \"name\": \"hgranger\",\n    \"publicKey\": {\n      \"x\": \"38035223810536273945556366218149112558607829411547667975304293530457502824247\",\n      \"y\": \"91117823763706733837104303008228095481082989039135234750508288790583476078729\"\n    }\n  },\n  \"chain\": \"<unknown>\",\n  \"scopes\": {\n    \"type\": \"transfer\",\n    \"tokenLocator\": \"base-sepolia:usdc\",\n    \"spendingLimit\": {\n      \"amount\": \"10\",\n      \"interval\": 86400\n    }\n  },\n  \"expiresAt\": \"2023-11-07T05:31:56Z\",\n  \"deployImmediately\": true\n}"

response = http.request(request)
puts response.read_body

{
  "type": "passkey",
  "id": "cWtP7gmZbd98HbKUuGXx5Q",
  "name": "hgranger",
  "publicKey": {
    "x": "38035223810536273945556366218149112558607829411547667975304293530457502824247",
    "y": "91117823763706733837104303008228095481082989039135234750508288790583476078729"
  },
  "validatorContractVersion": "0.2.0",
  "locator": "passkey:cWtP7gmZbd98HbKUuGXx5Q"
}

{
  "error": true,
  "message": "<error message>",
  "code": "<string>"
}

{
  "error": true,
  "message": "<error message>",
  "code": "<string>"
}

Headers

X-API-KEY

string

required

API key required for authentication

Path Parameters

walletLocator

string

required

A wallet locator can be of the format:

<walletAddress>
email:<email>:<chainType>[:<walletType>][:alias:<alias>] (walletType defaults to 'smart')
userId:<userId>:<chainType>[:<walletType>][:alias:<alias>] (white label user example)
phoneNumber:<phoneNumber>:<chainType>[:<walletType>][:alias:<alias>]
twitter:<handle>:<chainType>[:<walletType>][:alias:<alias>]
x:<handle>:<chainType>[:<walletType>][:alias:<alias>]
me:<chainType>[:<walletType>][:alias:<alias>] (Use when calling from the client side with a client API key)
chainType[:<walletType>]:alias:<alias>

Body

application/json

EVM
Solana
Stellar

Parameters for creating a EVM delegated signer

signer

required

Configuration for a WebAuthn/Passkey signer that uses public key credentials for authentication

Show child attributes

Example:

{
  "type": "passkey",
  "id": "cWtP7gmZbd98HbKUuGXx5Q",
  "name": "hgranger",
  "publicKey": {
    "x": "38035223810536273945556366218149112558607829411547667975304293530457502824247",
    "y": "91117823763706733837104303008228095481082989039135234750508288790583476078729"
  }
}

chain

any

required

The chain where the signer will be registered

scopes

Transfer · object[]

Optional array of scopes to restrict the signer's capabilities

Show child attributes

Example:

{
  "type": "transfer",
  "tokenLocator": "base-sepolia:usdc",
  "spendingLimit": { "amount": "10", "interval": 86400 }
}

expiresAt

string<date-time>

The expiry date of the signer in ISO 8601 format

Pattern:

^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

deployImmediately

boolean

If true, returns a transaction to register the signer in the wallet. If false (default), it generates a signature and the signer will be registered on the following transaction.

Response

The delegated signer has been successfully created.

Complete delegated signer response including the signer and authorization transaction

type

enum<string>

required

Identifier for the Passkey signer type

Available options:

passkey

string

required

Credential ID from the WebAuthn registration response

name

string

required

Human-readable name for the passkey

publicKey

object

required

The public key coordinates from the WebAuthn credential

Show child attributes

validatorContractVersion

string

required

ERC-7579 webAuthn validator contract version

locator

string

required

Unique identifier for locating this passkey signer

scopes

Transfer · object[]

Optional array of scopes restricting the signer's capabilities

Show child attributes

Example:

{
  "type": "transfer",
  "tokenLocator": "solana:sol",
  "spendingLimit": { "amount": "1" }
}

expiresAt

The expiry date of the signer in ISO 8601 format

transaction

object

The transaction for the signer

Show child attributes

Approve Signature Remove Delegated Signer

⌘I

Introduction

Quickstarts ⚡️

Concepts

Guides

API Reference

Create Delegated Signer

Headers

Path Parameters

Body

Response