---
title: "Import Keys"
method: POST
path: "/api/v1/organizations/import-keys"
tags: ["Organizations"]
---

# Import Keys

`POST /api/v1/organizations/import-keys`

Imports keys for an organization.

## Request body

- union
  - FireblocksImportPackage
    - `type` 'fireblocks', required
    - `key_name` string, required — The name of the key to import.
    - `backup_zip_content` string, required — The base64 encoded content of the Fireblocks backup zip file.
    - `encrypted_rsa_pem` string — Encrypted RSA private key used to encrypt the cosigner shares in PEM format.The encryption is done using `openssl cms -encrypt` command using the enclave's public certificate.If not provided, the default RSA key will be used.For more information, see https://docs.fordefi.com/user-guide/import-keys-fireblocks
    - `rsa_pem_password` string — The password for RSA private key.
  - StandaloneImportPackage
    - `type` 'standalone', required
    - `key_name` string, required — The name of the key to import.
    - `backup_zip_content` string, required — The base64 encoded content of the Fireblocks backup zip file.

## Response `200`

Successful Response

- StartImportKeysResponse
  - `keys` OrganizationMasterKey[], required — The list of imported keys.
    - `key_id` string, uuid, required — The ID of the imported key.
    - `key_name` string, required — The name of the imported key.
    - `key_type` 'ecdsa_secp256k1' | 'eddsa_ed25519' | 'ecdsa_stark' | 'schnorr_secp256k1', required
    - `key_origin` 'native' | 'imported', required
    - `xpub` string, required — The xpub encoding of the key. For more details, see https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki#serialization-format
    - `public_key_compressed` string, required — The public key of the vault in its compressed form: <ul> <li>For ECDSA and Schnorr keys, the public key is represented as 33 bytes (0x02 or 0x03 followed by the x-coordinate) according to the [SEC1 standard](https://www.secg.org/SEC1-Ver-1.0.pdf). <li>For EdDSA, the public key is represented as a 32-byte value, as defined by [RFC 8032](https://datatracker.ietf.org/doc/html/rfc8032). </ul>
    - `supports_derivation` boolean, required — Whether the key supports BIP-32 derivation. Standalone private keys do not support derivation.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized User
- `403` — Forbidden User
- `408` — Request Timeout
- `409` — Already Exists
- `422` — Validation Error
- `429` — Rate Limit Exceeded
- `500` — Unexpected Error

---

[API](https://skmtc.net/fordefi/apis/fordefi-api.md) · [All operations](https://skmtc.net/fordefi/apis/fordefi-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/fordefi/fordefi-api/versions/8014fd69ea17/schema)