Create Delegated Signer

Create a delegated signer for a smart wallet with optional restrictions around permissions and expiry date.

API scope required: wallets.create

POST /2025-06-09/wallets/{walletLocator}/signers

Create Delegated Signer

cURL

curl --request POST \
  --url https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers \
  --header 'Content-Type: application/json' \
  --header 'X-API-KEY: <x-api-key>' \
  --data '
{
  "signer": {
    "type": "passkey",
    "id": "cWtP7gmZbd98HbKUuGXx5Q",
    "name": "hgranger",
    "publicKey": {
      "x": "38035223810536273945556366218149112558607829411547667975304293530457502824247",
      "y": "91117823763706733837104303008228095481082989039135234750508288790583476078729"
    }
  },
  "chain": "<unknown>",
  "scopes": {
    "type": "transfer",
    "tokenLocator": "base-sepolia:usdc",
    "spendingLimit": {
      "amount": "10",
      "interval": 86400
    }
  },
  "expiresAt": "2023-11-07T05:31:56Z"
}
'

import requests

url = "https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers"

payload = {
    "signer": {
        "type": "passkey",
        "id": "cWtP7gmZbd98HbKUuGXx5Q",
        "name": "hgranger",
        "publicKey": {
            "x": "38035223810536273945556366218149112558607829411547667975304293530457502824247",
            "y": "91117823763706733837104303008228095481082989039135234750508288790583476078729"
        }
    },
    "chain": "<unknown>",
    "scopes": {
        "type": "transfer",
        "tokenLocator": "base-sepolia:usdc",
        "spendingLimit": {
            "amount": "10",
            "interval": 86400
        }
    },
    "expiresAt": "2023-11-07T05:31:56Z"
}
headers = {
    "X-API-KEY": "<x-api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'X-API-KEY': '<x-api-key>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    signer: {
      type: 'passkey',
      id: 'cWtP7gmZbd98HbKUuGXx5Q',
      name: 'hgranger',
      publicKey: {
        x: '38035223810536273945556366218149112558607829411547667975304293530457502824247',
        y: '91117823763706733837104303008228095481082989039135234750508288790583476078729'
      }
    },
    chain: '<unknown>',
    scopes: {
      type: 'transfer',
      tokenLocator: 'base-sepolia:usdc',
      spendingLimit: {amount: '10', interval: 86400}
    },
    expiresAt: '2023-11-07T05:31:56Z'
  })
};

fetch('https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'signer' => [
        'type' => 'passkey',
        'id' => 'cWtP7gmZbd98HbKUuGXx5Q',
        'name' => 'hgranger',
        'publicKey' => [
                'x' => '38035223810536273945556366218149112558607829411547667975304293530457502824247',
                'y' => '91117823763706733837104303008228095481082989039135234750508288790583476078729'
        ]
    ],
    'chain' => '<unknown>',
    'scopes' => [
        'type' => 'transfer',
        'tokenLocator' => 'base-sepolia:usdc',
        'spendingLimit' => [
                'amount' => '10',
                'interval' => 86400
        ]
    ],
    'expiresAt' => '2023-11-07T05:31:56Z'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-API-KEY: <x-api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers"

	payload := strings.NewReader("{\n  \"signer\": {\n    \"type\": \"passkey\",\n    \"id\": \"cWtP7gmZbd98HbKUuGXx5Q\",\n    \"name\": \"hgranger\",\n    \"publicKey\": {\n      \"x\": \"38035223810536273945556366218149112558607829411547667975304293530457502824247\",\n      \"y\": \"91117823763706733837104303008228095481082989039135234750508288790583476078729\"\n    }\n  },\n  \"chain\": \"<unknown>\",\n  \"scopes\": {\n    \"type\": \"transfer\",\n    \"tokenLocator\": \"base-sepolia:usdc\",\n    \"spendingLimit\": {\n      \"amount\": \"10\",\n      \"interval\": 86400\n    }\n  },\n  \"expiresAt\": \"2023-11-07T05:31:56Z\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-KEY", "<x-api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers")
  .header("X-API-KEY", "<x-api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"signer\": {\n    \"type\": \"passkey\",\n    \"id\": \"cWtP7gmZbd98HbKUuGXx5Q\",\n    \"name\": \"hgranger\",\n    \"publicKey\": {\n      \"x\": \"38035223810536273945556366218149112558607829411547667975304293530457502824247\",\n      \"y\": \"91117823763706733837104303008228095481082989039135234750508288790583476078729\"\n    }\n  },\n  \"chain\": \"<unknown>\",\n  \"scopes\": {\n    \"type\": \"transfer\",\n    \"tokenLocator\": \"base-sepolia:usdc\",\n    \"spendingLimit\": {\n      \"amount\": \"10\",\n      \"interval\": 86400\n    }\n  },\n  \"expiresAt\": \"2023-11-07T05:31:56Z\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://staging.crossmint.com/api/2025-06-09/wallets/{walletLocator}/signers")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-KEY"] = '<x-api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"signer\": {\n    \"type\": \"passkey\",\n    \"id\": \"cWtP7gmZbd98HbKUuGXx5Q\",\n    \"name\": \"hgranger\",\n    \"publicKey\": {\n      \"x\": \"38035223810536273945556366218149112558607829411547667975304293530457502824247\",\n      \"y\": \"91117823763706733837104303008228095481082989039135234750508288790583476078729\"\n    }\n  },\n  \"chain\": \"<unknown>\",\n  \"scopes\": {\n    \"type\": \"transfer\",\n    \"tokenLocator\": \"base-sepolia:usdc\",\n    \"spendingLimit\": {\n      \"amount\": \"10\",\n      \"interval\": 86400\n    }\n  },\n  \"expiresAt\": \"2023-11-07T05:31:56Z\"\n}"

response = http.request(request)
puts response.read_body

201

{
  "type": "passkey",
  "id": "cWtP7gmZbd98HbKUuGXx5Q",
  "name": "hgranger",
  "publicKey": {
    "x": "38035223810536273945556366218149112558607829411547667975304293530457502824247",
    "y": "91117823763706733837104303008228095481082989039135234750508288790583476078729"
  },
  "validatorContractVersion": "0.2.0",
  "locator": "passkey:cWtP7gmZbd98HbKUuGXx5Q"
}

{
  "error": true,
  "message": "<error message>"
}

{
  "error": true,
  "message": "<error message>"
}

Headers

X-API-KEY · string · required

API key required for authentication

Path Parameters

walletLocator · string · required

A wallet locator can be of the format:

• <walletAddress>
• email:<email>:<chainType>[:<walletType>][:alias:<alias>] (walletType defaults to 'smart')
• userId:<userId>:<chainType>[:<walletType>][:alias:<alias>] (white label user example)
• phoneNumber:<phoneNumber>:<chainType>[:<walletType>][:alias:<alias>]
• twitter:<handle>:<chainType>[:<walletType>][:alias:<alias>]
• x:<handle>:<chainType>[:<walletType>][:alias:<alias>]
• me:<chainType>[:<walletType>][:alias:<alias>] (Use when calling from the client side with a client API key)
• chainType[:<walletType>]:alias:<alias>

Body

application/json

EVM

Solana

Stellar

Parameters for creating a EVM delegated signer

signer · Passkey Signer · object API Key Signer · object External Wallet Signer · object Server Signer · object Email Signer · object Phone Signer · object Device Signer · object string · required

Configuration for a WebAuthn/Passkey signer that uses public key credentials for authentication

Show child attributes

Example:

{
  "type": "passkey",
  "id": "cWtP7gmZbd98HbKUuGXx5Q",
  "name": "hgranger",
  "publicKey": {
    "x": "38035223810536273945556366218149112558607829411547667975304293530457502824247",
    "y": "91117823763706733837104303008228095481082989039135234750508288790583476078729"
  }
}

chain · any · required

The chain where the signer will be registered

scopes · Transfer · object[]

Optional array of scopes to restrict the signer's capabilities

Show child attributes

Example:

{
  "type": "transfer",
  "tokenLocator": "base-sepolia:usdc",
  "spendingLimit": { "amount": "10", "interval": 86400 }
}

expiresAt · string<date-time>

The expiry date of the signer in ISO 8601 format

Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

Response

201

application/json

The delegated signer has been successfully created.

Solana Delegated Signer Response

Solana Delegated Signer Response

Solana Delegated Signer Response

Solana Delegated Signer Response

Solana Delegated Signer Response

Solana Delegated Signer Response

Solana Delegated Signer Response

EVM Delegated Signer Response

EVM Delegated Signer Response

EVM Delegated Signer Response

EVM Delegated Signer Response

EVM Delegated Signer Response

EVM Delegated Signer Response

EVM Delegated Signer Response

Stellar Delegated Signer Response

Stellar Delegated Signer Response

Stellar Delegated Signer Response

Stellar Delegated Signer Response

Stellar Delegated Signer Response

Stellar Delegated Signer Response

Stellar Delegated Signer Response

Complete delegated signer response including the signer and authorization transaction

type · enum<string> · required

Identifier for the Passkey signer type

Available options: passkey

id · string · required

Credential ID from the WebAuthn registration response

name · string · required

Human-readable name for the passkey

publicKey · object · required

The public key coordinates from the WebAuthn credential

Show child attributes

validatorContractVersion · string · required

ERC-7579 webAuthn validator contract version

locator · string · required

Unique identifier for locating this passkey signer

scopes · Transfer · object[]

Optional array of scopes restricting the signer's capabilities

Show child attributes

Example:

{
  "type": "transfer",
  "tokenLocator": "solana:sol",
  "spendingLimit": { "amount": "1" }
}

expiresAt · number string

The expiry date of the signer in ISO 8601 format

transaction · object

The transaction for the signer

Show child attributes