> ## Documentation Index
> Fetch the complete documentation index at: https://docs.turnkey.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Turnkey is wallet infrastructure: create and manage crypto wallets, sign transactions, and enforce policy-based access controls. Best-fit uses: embedded consumer wallets (email/passkey/social auth, no seed phrases), automated onchain operations with server-side wallets, AI agent wallets with policy-scoped signing, enterprise key management, and verifiable off-chain workloads on Turnkey Verifiable Cloud (TVC).
> Every API call is a JSON POST to https://api.turnkey.com signed with a P-256 API key; create an organization and key self-serve at https://app.turnkey.com.
> Key Turnkey developer resources: API reference (https://docs.turnkey.com/api-reference/overview/intro.md), OpenAPI spec (https://docs.turnkey.com/public_api.swagger.json), authentication (https://docs.turnkey.com/features/authentication/overview.md), webhooks (https://docs.turnkey.com/features/webhooks/overview.md), MCP server for docs search (https://docs.turnkey.com/mcp), agent skills (https://docs.turnkey.com/get-started/ai-skills.md), CLI (https://docs.turnkey.com/sdks/cli.md), SDK reference (https://docs.turnkey.com/sdks/introduction.md), full docs content (https://docs.turnkey.com/llms-full.txt).

# Verify wallet authenticator

> Verify a SIWE or SIWS login and return an enclave-signed wallet verification token.

POST

/

public

/

v1

/

submit

/

verify\_wallet\_authenticator

Activity requests must meet the [signed-request validity window](https://docs.turnkey.com/api-reference/activities/overview.md#signed-request-validity) for `timestampMs` and the applicable [rate limits](https://docs.turnkey.com/reference/rate-limits.md).

### Authorizations

**API Key**

**X-Stamp** `string` *required*

Cryptographically signed (stamped) request to be passed in as a header. For more info, see [here](https://docs.turnkey.com/developer-reference/api-overview/stamps.md).

**WebAuthn (Passkey)**

**X-Stamp-WebAuthn** `string` *required*

Cryptographically signed (stamped) request to be passed in as a header. For more info, see [here](https://docs.turnkey.com/developer-reference/api-overview/stamps.md).

### Body

**type** `enum\<string\>` *required*

Enum options: `ACTIVITY_TYPE_VERIFY_WALLET_AUTHENTICATOR`

**timestampMs** `string` *required*

Timestamp (in milliseconds) of the request, used to verify liveness of user requests.

**organizationId** `string` *required*

Unique identifier for a given Organization.

**parameters** `object` *required*

The parameters object containing the specific intent data for this activity.

**details**

Navigate to header

parameters.
message

string

required

SIWE or SIWS message. Ump accepts only the Turnkey supported login template.

Navigate to header

parameters.
signature

string

required

Wallet signature over the message. Ethereum: 65-byte hex personal\_sign (r || s || v). Solana: 64-byte hex ed25519 signature.

Navigate to header

parameters.
publicKey

string

required

Wallet public key that signed the message. Ethereum: sec1 secp256k1 hex, compressed or uncompressed. Solana: 32-byte ed25519 hex.

**generateAppProofs** `boolean`

Enable to have your activity generate and return App Proofs, enabling verifiability.

### Response

A successful response returns the following fields:

**activity** `object` *required*

The activity object containing type, intent, and result

**activity details**

Navigate to header

activity.
id

string

required

Unique identifier for a given Activity object.

Navigate to header

activity.
organizationId

string

required

Unique identifier for a given Organization.

Navigate to header

activity.
status

string

required

The activity status

Navigate to header

activity.
type

string

required

The activity type

Navigate to header

activity.
intent

object

required

The intent of the activity

**intent details**

Navigate to header

activity.intent.
verifyWalletAuthenticatorIntent

object

required

The verifyWalletAuthenticatorIntent object

**verifyWalletAuthenticatorIntent details**

Navigate to header

activity.intent.verifyWalletAuthenticatorIntent.
message

string

required

SIWE or SIWS message. Ump accepts only the Turnkey supported login template.

Navigate to header

activity.intent.verifyWalletAuthenticatorIntent.
signature

string

required

Wallet signature over the message. Ethereum: 65-byte hex personal\_sign (r || s || v). Solana: 64-byte hex ed25519 signature.

Navigate to header

activity.intent.verifyWalletAuthenticatorIntent.
publicKey

string

required

Wallet public key that signed the message. Ethereum: sec1 secp256k1 hex, compressed or uncompressed. Solana: 32-byte ed25519 hex.

Navigate to header

activity.
result

object

required

The result of the activity

**result details**

Navigate to header

activity.result.
verifyWalletAuthenticatorResult

object

required

The verifyWalletAuthenticatorResult object

**verifyWalletAuthenticatorResult details**

Navigate to header

activity.result.verifyWalletAuthenticatorResult.
verificationToken

string

required

Enclave-signed JWT binding the wallet, the wallet public key, and the ephemeral P-256 session key.

Navigate to header

activity.
votes

array

required

A list of objects representing a particular User's approval or rejection of a Consensus request, including all relevant metadata.

Navigate to header

activity.
fingerprint

string

required

An artifact verifying a User's action.

Navigate to header

activity.
canApprove

boolean

required

Whether the activity can be approved.

Navigate to header

activity.
canReject

boolean

required

Whether the activity can be rejected.

Navigate to header

activity.
createdAt

string

required

The creation timestamp.

Navigate to header

activity.
updatedAt

string

required

The last update timestamp.

```bash title="cURL" theme={"system"}
curl --request POST \
  --url https://api.turnkey.com/public/v1/submit/verify_wallet_authenticator \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json' \
  --header "X-Stamp: <string> (see Authorizations)" \
  --data '{
    "type": "ACTIVITY_TYPE_VERIFY_WALLET_AUTHENTICATOR",
    "timestampMs": "<string> (e.g. 1746736509954)",
    "organizationId": "<string> (Your Organization ID)",
    "parameters": {
        "message": "<string>",
        "signature": "<string>",
        "publicKey": "<string>"
    }
}'
```

```javascript title="JavaScript" theme={"system"}
import { Turnkey } from "@turnkey/sdk-server";

const turnkeyClient = new Turnkey({
  apiBaseUrl: "https://api.turnkey.com",
  apiPublicKey: process.env.API_PUBLIC_KEY!,
  apiPrivateKey: process.env.API_PRIVATE_KEY!,
  defaultOrganizationId: process.env.ORGANIZATION_ID!,
});

const response = await turnkeyClient.apiClient().verifyWalletAuthenticator({
  message: "<string> (SIWE or SIWS message. Ump accepts only the Turnkey supported login template.)",
  signature: "<string> (Wallet signature over the message. Ethereum: 65-byte hex personal_sign (r || s || v). Solana: 64-byte hex ed25519 signature.)",
  publicKey: "<string> (Wallet public key that signed the message. Ethereum: sec1 secp256k1 hex, compressed or uncompressed. Solana: 32-byte ed25519 hex.)"
});
```

```json 200 theme={"system"}
{
  "activity": {
    "id": "<activity-id>",
    "status": "ACTIVITY_STATUS_COMPLETED",
    "type": "ACTIVITY_TYPE_VERIFY_WALLET_AUTHENTICATOR",
    "organizationId": "<organization-id>",
    "timestampMs": "<timestamp> (e.g. 1746736509954)",
    "result": {
      "activity": {
        "id": "<string>",
        "organizationId": "<string>",
        "status": "<string>",
        "type": "<string>",
        "intent": {
          "verifyWalletAuthenticatorIntent": {
            "message": "<string>",
            "signature": "<string>",
            "publicKey": "<string>"
          }
        },
        "result": {
          "verifyWalletAuthenticatorResult": {
            "verificationToken": "<string>"
          }
        },
        "votes": "<array>",
        "fingerprint": "<string>",
        "canApprove": "<boolean>",
        "canReject": "<boolean>",
        "createdAt": "<string>",
        "updatedAt": "<string>"
      }
    }
  }
}
```


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.