Export wallet key

Session-only. Export a custodial wallet’s private key as a passphrase-encrypted .nota envelope (PBKDF2-SHA256 with 310,000 iterations + AES-256-GCM, applied server-side; the plaintext key never leaves the platform). Only custodial wallets can be exported.

POST /wallets/{id}/export

Export wallet key

cURL

curl --request POST \
  --url https://aropay.aro.media/api/v1/wallets/{id}/export \
  --header 'Content-Type: application/json' \
  --cookie aropay_session= \
  --data '
{
  "passphrase": "<string>"
}
'

200

{
  "ok": true,
  "data": {
    "filename": "payouts-key.nota",
    "nota": "…passphrase-encrypted key envelope…"
  }
}

Authorizations

aropay_session · string · cookie · required

Browser session cookie minted by POST /auth/login (or passkey login). httpOnly, SameSite=Lax, 24 h TTL. Endpoints marked Session-only accept only this credential and return 403 session_required for API keys.

Path Parameters

id · string · required

Wallet ID.

Body

application/json

passphrase · string · required

Encrypts the exported key. Choose a long one; it cannot be recovered.

Required string length: 8 - 200

Response

200

application/json

Encrypted key envelope.

ok · any · required

data · object · required

Show child attributes