Authorize a DFNS-signed Canton deposit
curl --request POST \
--url https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"action": "complete",
"depositId": "{{depositId}}",
"signingStep": "owner_offer_acceptance",
"challengeIdentifier": "{{challengeIdentifier}}",
"firstFactor": {
"kind": "Fido2",
"credentialAssertion": {
"credId": "{{passkeyCredentialId}}",
"clientData": "{{passkeyClientData}}",
"signature": "{{passkeySignature}}",
"authenticatorData": "{{passkeyAuthenticatorData}}"
}
}
}
'import requests
url = "https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm"
payload = {
"action": "complete",
"depositId": "{{depositId}}",
"signingStep": "owner_offer_acceptance",
"challengeIdentifier": "{{challengeIdentifier}}",
"firstFactor": {
"kind": "Fido2",
"credentialAssertion": {
"credId": "{{passkeyCredentialId}}",
"clientData": "{{passkeyClientData}}",
"signature": "{{passkeySignature}}",
"authenticatorData": "{{passkeyAuthenticatorData}}"
}
}
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
action: 'complete',
depositId: '{{depositId}}',
signingStep: 'owner_offer_acceptance',
challengeIdentifier: '{{challengeIdentifier}}',
firstFactor: {
kind: 'Fido2',
credentialAssertion: {
credId: '{{passkeyCredentialId}}',
clientData: '{{passkeyClientData}}',
signature: '{{passkeySignature}}',
authenticatorData: '{{passkeyAuthenticatorData}}'
}
}
})
};
fetch('https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'action' => 'complete',
'depositId' => '{{depositId}}',
'signingStep' => 'owner_offer_acceptance',
'challengeIdentifier' => '{{challengeIdentifier}}',
'firstFactor' => [
'kind' => 'Fido2',
'credentialAssertion' => [
'credId' => '{{passkeyCredentialId}}',
'clientData' => '{{passkeyClientData}}',
'signature' => '{{passkeySignature}}',
'authenticatorData' => '{{passkeyAuthenticatorData}}'
]
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm"
payload := strings.NewReader("{\n \"action\": \"complete\",\n \"depositId\": \"{{depositId}}\",\n \"signingStep\": \"owner_offer_acceptance\",\n \"challengeIdentifier\": \"{{challengeIdentifier}}\",\n \"firstFactor\": {\n \"kind\": \"Fido2\",\n \"credentialAssertion\": {\n \"credId\": \"{{passkeyCredentialId}}\",\n \"clientData\": \"{{passkeyClientData}}\",\n \"signature\": \"{{passkeySignature}}\",\n \"authenticatorData\": \"{{passkeyAuthenticatorData}}\"\n }\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"action\": \"complete\",\n \"depositId\": \"{{depositId}}\",\n \"signingStep\": \"owner_offer_acceptance\",\n \"challengeIdentifier\": \"{{challengeIdentifier}}\",\n \"firstFactor\": {\n \"kind\": \"Fido2\",\n \"credentialAssertion\": {\n \"credId\": \"{{passkeyCredentialId}}\",\n \"clientData\": \"{{passkeyClientData}}\",\n \"signature\": \"{{passkeySignature}}\",\n \"authenticatorData\": \"{{passkeyAuthenticatorData}}\"\n }\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"action\": \"complete\",\n \"depositId\": \"{{depositId}}\",\n \"signingStep\": \"owner_offer_acceptance\",\n \"challengeIdentifier\": \"{{challengeIdentifier}}\",\n \"firstFactor\": {\n \"kind\": \"Fido2\",\n \"credentialAssertion\": {\n \"credId\": \"{{passkeyCredentialId}}\",\n \"clientData\": \"{{passkeyClientData}}\",\n \"signature\": \"{{passkeySignature}}\",\n \"authenticatorData\": \"{{passkeyAuthenticatorData}}\"\n }\n }\n}"
response = http.request(request)
puts response.read_body{
"version": "local-signing/v2",
"status": "approval_required",
"signingStep": "owner_account_acceptance",
"challenge": {
"challenge": "<string>",
"challengeIdentifier": "<string>",
"allowCredentials": {
"key": [
{
"type": "public-key",
"id": "<string>"
}
],
"webauthn": [
{
"type": "public-key",
"id": "<string>"
}
]
},
"userVerification": "required"
},
"deposit": {
"version": "local-signing/v2",
"environment": "local",
"adminCommandId": "<string>",
"fundingIntentId": "<string>",
"depositId": "<string>",
"engineCommandId": "<string>",
"accountId": "<string>",
"partyId": "<string>",
"asset": "USD.E",
"amountAtoms": "<string>",
"plannedCantonCommands": [
{
"step": "treasury_offer",
"commandId": "<string>"
}
],
"status": "bound",
"cantonOutcome": {
"step": "treasury_offer",
"outcome": "sequenced_accepted",
"guard": "completion_accepted"
}
}
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid",
"apiKeyRejection": "malformed",
"rejectionGuard": "amount_atoms_invalid",
"withdrawalFailure": "requested",
"dependency": "dfns"
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid",
"apiKeyRejection": "malformed",
"rejectionGuard": "amount_atoms_invalid",
"withdrawalFailure": "requested",
"dependency": "dfns"
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid",
"apiKeyRejection": "malformed",
"rejectionGuard": "amount_atoms_invalid",
"withdrawalFailure": "requested",
"dependency": "dfns"
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid",
"apiKeyRejection": "malformed",
"rejectionGuard": "amount_atoms_invalid",
"withdrawalFailure": "requested",
"dependency": "dfns"
}Accounts
Authorize a DFNS-signed Canton deposit
Drives the next owner-authorized Canton command. When an owner approval is due, initiate returns a DFNS WebAuthn challenge with status approval_required, and complete consumes that exact assertion and executes the immutable prepared transaction. When no owner approval is due, initiate returns the deposit itself: submitted or submitted_unknown while a Canton step is still being confirmed, and ledger_confirmed once the final ledger receipt exists. After a submitted or submitted_unknown answer, initiate again until the next approval or ledger_confirmed; a deposit needs up to three owner approvals. Prepared transactions, hashes, signatures, and bearer material remain server-only.
Method and path: POST /v1/accounts//deposits/confirm
Authentication: DFNS trader bearer required.
Request schema: DfnsDepositConfirmRequest.
Response schema: DfnsDepositConfirmResponse.
Error envelope: ExternalRestError (external-rest-error/v1).
POST
/
v1
/
accounts
/
{accountId}
/
deposits
/
confirm
Authorize a DFNS-signed Canton deposit
curl --request POST \
--url https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"action": "complete",
"depositId": "{{depositId}}",
"signingStep": "owner_offer_acceptance",
"challengeIdentifier": "{{challengeIdentifier}}",
"firstFactor": {
"kind": "Fido2",
"credentialAssertion": {
"credId": "{{passkeyCredentialId}}",
"clientData": "{{passkeyClientData}}",
"signature": "{{passkeySignature}}",
"authenticatorData": "{{passkeyAuthenticatorData}}"
}
}
}
'import requests
url = "https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm"
payload = {
"action": "complete",
"depositId": "{{depositId}}",
"signingStep": "owner_offer_acceptance",
"challengeIdentifier": "{{challengeIdentifier}}",
"firstFactor": {
"kind": "Fido2",
"credentialAssertion": {
"credId": "{{passkeyCredentialId}}",
"clientData": "{{passkeyClientData}}",
"signature": "{{passkeySignature}}",
"authenticatorData": "{{passkeyAuthenticatorData}}"
}
}
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
action: 'complete',
depositId: '{{depositId}}',
signingStep: 'owner_offer_acceptance',
challengeIdentifier: '{{challengeIdentifier}}',
firstFactor: {
kind: 'Fido2',
credentialAssertion: {
credId: '{{passkeyCredentialId}}',
clientData: '{{passkeyClientData}}',
signature: '{{passkeySignature}}',
authenticatorData: '{{passkeyAuthenticatorData}}'
}
}
})
};
fetch('https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'action' => 'complete',
'depositId' => '{{depositId}}',
'signingStep' => 'owner_offer_acceptance',
'challengeIdentifier' => '{{challengeIdentifier}}',
'firstFactor' => [
'kind' => 'Fido2',
'credentialAssertion' => [
'credId' => '{{passkeyCredentialId}}',
'clientData' => '{{passkeyClientData}}',
'signature' => '{{passkeySignature}}',
'authenticatorData' => '{{passkeyAuthenticatorData}}'
]
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm"
payload := strings.NewReader("{\n \"action\": \"complete\",\n \"depositId\": \"{{depositId}}\",\n \"signingStep\": \"owner_offer_acceptance\",\n \"challengeIdentifier\": \"{{challengeIdentifier}}\",\n \"firstFactor\": {\n \"kind\": \"Fido2\",\n \"credentialAssertion\": {\n \"credId\": \"{{passkeyCredentialId}}\",\n \"clientData\": \"{{passkeyClientData}}\",\n \"signature\": \"{{passkeySignature}}\",\n \"authenticatorData\": \"{{passkeyAuthenticatorData}}\"\n }\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"action\": \"complete\",\n \"depositId\": \"{{depositId}}\",\n \"signingStep\": \"owner_offer_acceptance\",\n \"challengeIdentifier\": \"{{challengeIdentifier}}\",\n \"firstFactor\": {\n \"kind\": \"Fido2\",\n \"credentialAssertion\": {\n \"credId\": \"{{passkeyCredentialId}}\",\n \"clientData\": \"{{passkeyClientData}}\",\n \"signature\": \"{{passkeySignature}}\",\n \"authenticatorData\": \"{{passkeyAuthenticatorData}}\"\n }\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://mainnet.edel-api.xyz/v1/accounts/{accountId}/deposits/confirm")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"action\": \"complete\",\n \"depositId\": \"{{depositId}}\",\n \"signingStep\": \"owner_offer_acceptance\",\n \"challengeIdentifier\": \"{{challengeIdentifier}}\",\n \"firstFactor\": {\n \"kind\": \"Fido2\",\n \"credentialAssertion\": {\n \"credId\": \"{{passkeyCredentialId}}\",\n \"clientData\": \"{{passkeyClientData}}\",\n \"signature\": \"{{passkeySignature}}\",\n \"authenticatorData\": \"{{passkeyAuthenticatorData}}\"\n }\n }\n}"
response = http.request(request)
puts response.read_body{
"version": "local-signing/v2",
"status": "approval_required",
"signingStep": "owner_account_acceptance",
"challenge": {
"challenge": "<string>",
"challengeIdentifier": "<string>",
"allowCredentials": {
"key": [
{
"type": "public-key",
"id": "<string>"
}
],
"webauthn": [
{
"type": "public-key",
"id": "<string>"
}
]
},
"userVerification": "required"
},
"deposit": {
"version": "local-signing/v2",
"environment": "local",
"adminCommandId": "<string>",
"fundingIntentId": "<string>",
"depositId": "<string>",
"engineCommandId": "<string>",
"accountId": "<string>",
"partyId": "<string>",
"asset": "USD.E",
"amountAtoms": "<string>",
"plannedCantonCommands": [
{
"step": "treasury_offer",
"commandId": "<string>"
}
],
"status": "bound",
"cantonOutcome": {
"step": "treasury_offer",
"outcome": "sequenced_accepted",
"guard": "completion_accepted"
}
}
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid",
"apiKeyRejection": "malformed",
"rejectionGuard": "amount_atoms_invalid",
"withdrawalFailure": "requested",
"dependency": "dfns"
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid",
"apiKeyRejection": "malformed",
"rejectionGuard": "amount_atoms_invalid",
"withdrawalFailure": "requested",
"dependency": "dfns"
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid",
"apiKeyRejection": "malformed",
"rejectionGuard": "amount_atoms_invalid",
"withdrawalFailure": "requested",
"dependency": "dfns"
}{
"version": "external-rest-error/v1",
"requestId": "<string>",
"code": "invalid_request",
"safeMessage": "<string>",
"retryable": true,
"recoveryActions": [
"none"
],
"occurredAtEpochMs": 1,
"realtimeTicketFailure": "invalid",
"apiKeyRejection": "malformed",
"rejectionGuard": "amount_atoms_invalid",
"withdrawalFailure": "requested",
"dependency": "dfns"
}Authorizations
The authorization field takes the session bearer returned by sign-in, or an API key where the route allows keys. Paste the token itself into the authorization field.
Path Parameters
Minimum string length:
1Body
application/json
Response
Success
- Option 1
- Option 2
- Option 3
- Option 4
- Option 5
- Option 6
- Option 7
- Option 8
Allowed value:
"local-signing/v2"Allowed value:
"approval_required"Available options:
owner_account_acceptance, owner_offer_acceptance, owner_deposit_authorization Show child attributes
Show child attributes
- Option 1
- Option 2
- Option 3
- Option 4
- Option 5
- Option 6
- Option 7
Show child attributes
Show child attributes