identity.key.create

Generate a signing keypair for the current organization

Generate a signing keypair for the current organization.

kind=user: private_key returned ONCE on the start response (sync auto-advance). kind=service: never returned.

HTTP start still redacts the field name private_key. The same hex is copied onto temporary_view_token so the existing one-time serializer channel can return nsec to the console.

Overview

Property	Value
Workflow type	Linear
Library	App-identity
Version	1.0

Input Schema

Field	Type	Required	Default	Description
actor	string	No	—	—
organization_uuid	uuid	No	—	—
label	string	Yes	—	—
kind	string	No	user	—
algorithm	string	No	secp256k1	—

Output Schema

Field	Type	Required	Default	Description
key_uuid	string	Yes	—	—
label	string	Yes	—	—
kind	string	Yes	—	—
algorithm	string	Yes	—	—
public_key	string	Yes	—	—
public_key_fingerprint	string	Yes	—	—
private_key	string	No	—	—
temporary_view_token	string	No	—	—
created_at	string	Yes	—	—
failure_reason	string	No	—	—
failure_type	string	No	—	—
failed_action	string	No	—	—
failed_at_state	string	No	—	—
failed_step	string	No	—	—
failed_layer	string	No	—	—
error	string	No	—	—
error_type	string	No	—	—

States

State	Initial	Terminal	Success	Auto-advance	Description
initiated	Yes	No	—	generate	—
generating	No	No	—	persist	—
persisting	No	No	—	complete	—
completed	No	Yes	Yes	—	—
failed	No	Yes	No	—	—

State Diagram

Transitions

From	Action	To	Description
initiated	generate	generating	—
generating	persist	persisting	—
persisting	complete	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "identity.key.create",
  "initial_data": {
    "label": "value"
  }
}