This page controls vault access. Three tiers are managed here: primary manager (display only), secondary managers (on-chain delegates), and view-only users (off-chain read access). Primary manager access required.
The full manager list is fetched from GET /api/v1/users?vault_address={}&chain_id={}&limit=100.
Tab 1: Primary Manager
Displays the primary manager’s wallet address and display name. Set at vault creation, immutable without governance-level contract interaction. This key is the root of trust for the vault.
Tab 2: Secondary Managers
On-chain delegates with full operational access (except vault settings and user management).
Adding
- Click Add Secondary Manager
- Enter wallet address
- Click Prepare —
POST /api/v1/users/secondary-manager/prepare → calldata
- Sign the on-chain transaction
Removing
- Click Remove —
POST /api/v1/users/secondary-manager/remove/prepare → calldata
- Sign the on-chain transaction
Updating Display Names
Click the pencil icon to update any user’s display name (off-chain, no gas):
PATCH /api/v1/users/{wallet_address}/display-name
{ "display_name": "Alice (Operations)" }
Tab 3: View Only
Read-only dashboard access. No on-chain transaction required.
# Add
POST /api/v1/users/view-only
{ "vault_address": "0x...", "chain_id": 8453, "wallet_address": "0x...", "display_name": "Risk Monitor" }
# Remove
DELETE /api/v1/users/view-only/{wallet_address}?vault_address={}&chain_id={}
API Reference
| Endpoint | Method | Description |
|---|
/api/v1/users | GET | All users for vault |
/api/v1/users/secondary-manager/prepare | POST | Prepare add tx |
/api/v1/users/secondary-manager/remove/prepare | POST | Prepare remove tx |
/api/v1/users/view-only | POST | Add view-only |
/api/v1/users/view-only/{wallet} | DELETE | Remove view-only |
/api/v1/users/{wallet}/display-name | PATCH | Update display name |
User Object
{
"user": {
"id": "uuid",
"wallet_address": "0x...",
"display_name": "Alice"
},
"roles": [
{
"vault_address": "0x...",
"chain_id": 8453,
"role": "secondary_manager",
"granted_by": "0xPrimary...",
"granted_at": "2025-01-15T10:30:00Z"
}
]
}
Add at least one secondary manager before going live. If you lose access to the primary key, secondary managers can continue vault operations.