Skip to main content
Generated from the Techstack v0.39.0 release (source 49677b729cb9). For an installed version, techstack api <command> --help is authoritative.

​
techstack api wallet list

List redacted wallet recovery items. Lists the caller’s wallet recovery items for the resolved tenant. The secret and totp values are always stripped from this response; only presence flags (has_secret, has_totp) are exposed.

​
techstack api wallet reauth-proof

Mint a short-lived reauth proof after a fresh platform re-auth. After a fresh biometric/platform re-authentication, mints a short-lived trusted-reauth HMAC proof (timestamp + signature) usable to authorize a subsequent reveal within the 5-minute window. Requires a valid fresh platform reauth assertion on the request.

​
techstack api wallet reveal

Reveal a wallet recovery secret/TOTP, gated by a fresh reauth proof. Biometric-gated. Requires a fresh trusted-reauth HMAC proof (timestamp + signature, 5-minute window) supplied in the body or the X-Kombify-Reauth-\* / X-TechStack-Reauth-\* headers. Returns the plaintext recovery values once; the reveal is audited server-side.