---
title: "Request Vault Access"
method: POST
path: "/v1/vault/access"
tags: ["Vault"]
---

# Request Vault Access

`POST /v1/vault/access`

Agent requests access to a vault item by name. Sends a push notification to the user for biometric approval. Poll GET /v1/vault/access/{id} for the status + decrypted payload.

## Request body

- object
  - `itemName` string, required
  - `fieldPath` string, required
  - `purpose` string, required
  - `ephemeralPublicKey` string, required
  - `expiresInSecs` integer

## Response `200`

Default Response

- object
  - `id` string, required — Access request ID — use this to poll status
  - `status` string, required — Initial status — typically "pending"
  - `challengeHex` string, required — Challenge the mobile device signs on approval
  - `ephemeralPublicKey` string, required
  - `expiresAt` string, date-time, required
  - `createdAt` string, date-time, required

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Vault item not found

---

[API](https://skmtc.net/bkeyid/apis/bkey-api.md) · [All operations](https://skmtc.net/bkeyid/apis/bkey-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bkeyid/bkey-api/revisions/2c7566abec9e/schema)