Authorize a Vault policy

Authorize a pending Vault policy with the owner’s signature or the managed email code.

POST /v2/accounts/{accountId}/vault/policies/{policyId}/authorize

cURL

external-signer-signature

curl --request POST \ --url https://prod-api.stableyard.fi/v2/accounts/{accountId}/vault/policies/{policyId}/authorize \ --header 'Authorization: Basic <encoded-value>' \ --header 'Content-Type: application/json' \ --header 'Idempotency-Key: <idempotency-key>' \ --data ' { "method": "eip712_signature", "signerAddress": "0x3333333333333333333333333333333333333333", "signature": "0x..." } '

200

{
  "id": "vault_policy_123",
  "vaultId": "vault_123",
  "version": 1,
  "policySchemaVersion": 1,
  "status": "draft",
  "ownershipMode": "external",
  "allowedTokens": [
    {
      "symbol": "USDC",
      "chainId": 42161,
      "tokenAddress": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
      "decimals": 6
    }
  ],
  "spendLimits": {
    "spendLimitAtomic": "500000000",
    "currency": "USD",
    "decimals": 6,
    "period": "fixed_30_day",
    "periodSeconds": 2592000,
    "enforcement": "example"
  },
  "yieldRules": {
    "provider": "none",
    "mode": "disabled"
  },
  "authorization": {},
  "resourceVersion": 1,
  "createdAt": "2026-08-28T10:00:00.000Z",
  "updatedAt": "2026-08-28T10:00:00.000Z"
}

Send method: eip712_signature with the external owner’s signerAddress and signature, or method: managed_email_otp with the managed Vault’s email code. Idempotency-Key is required.

For an external-signer Vault, the signature alone does not change the Vault’s on-chain spending policy. Get an account Vault then returns an execute_safe_transaction action, and the owner, or the owner multisig, executes the returned transaction. Record it with Submit an external Vault action transaction. Stableyard verifies the transaction receipt and the policy on chain, then marks the policy active.

Authorizations

Authorization · string · header · required

HTTP Basic auth. Username is the Stableyard app ID. Password is the app secret. The optional Stableyard-Version request header must match the environment pin.

Headers

Idempotency-Key · string · required

Retry key. Reuse a key only with the identical request; different input returns a conflict.

Example:

"request-key-001"

Stableyard-Version · enum<string>

Optional contract-version assertion. Omit it to use the app environment's pinned version. A different supported version is accepted only after that environment is explicitly migrated.

Available options: 2026-09-09

Path Parameters

accountId · string · required

Canonical account id returned by the Accounts API.

Example:

"acct_123"

policyId · string · required

Body

application/json

External signer signature

Managed vault email code

method · enum<string> · required

Available options: eip712_signature

signerAddress · string · required

Example:

"0x3333333333333333333333333333333333333333"

signature · string · required

Example:

"0x..."

Response

200

application/json

Authorized policy

id · string · required

Example:

"vault_policy_123"

vaultId · string · required

Example:

"vault_123"

version · integer · required

Required range: x >= 1

policySchemaVersion · integer · required

Required range: x >= 1

status · enum<string> · required

Available options: draft, pending_authorization, authorized, installing, active, superseded, revoked, failed

ownershipMode · enum<string> · required

Available options: external, stableyard

allowedTokens · object[] · required

Show child attributes

spendLimits · object · required

Show child attributes

yieldRules · object · required

Show child attributes

resourceVersion · integer · required

Required range: x >= 1

createdAt · string<date-time> · required

updatedAt · string<date-time> · required

authorization · object

Present on single-policy responses while authorization is pending.

nextAction · Vault action required · object | null

Show child attributes

reason · string | null

failureCode · string | null