SaaS Onboarding

Activate Your Admin Account

Open the registration link from your welcome email and set a strong password. Logins are protected by a second factor — a one-time email code by default. You can optionally enrol an authenticator app (TOTP) later in Settings → Security.

Log in to your dashboard at your instance URL (e.g., https://yourcompany.thevault.io).

Invite Your Team

Navigate to Settings → Users and add each user (email, first/last name). Then assign roles from the user’s Assign Roles action:

Invite at least one additional Admin for redundancy. Transaction approval comes from enrolled mobile signer devices, not a role — enrol at least two mobile signers. See Roles & Permissions.

Enroll Mobile Signer Devices

For each designated mobile signer:

1. Install The Vault app from the App Store (iOS) or Google Play (Android).
2. Open the app, tap Connect to Vault, enter your instance URL.
3. The app generates a device identity keypair (stored encrypted on the device) and submits an enrollment request.
4. Approve the device in Settings → Mobile devices — verify the device fingerprint out-of-band.

See Mobile App Setup for detailed instructions.

Create the Master Key

The master key is created through an MPC ceremony (DKG) in which each selected signer generates its own key share locally — all selected signers must be online simultaneously.

1. On the Wallets page, click Create master key, then Proceed on the confirmation prompt.
2. In the Signing devices and servers dialog, select an MPC scheme (k of n) — for example 3 of 4 — then select exactly n signers from the Mobile Devices and Servers shown. In SaaS mode the server signers are managed by The Vault and appear automatically.
3. Click Create.
4. All signers participate automatically — no approval tap is needed. Each selected mobile device must be online with The Vault app open for the duration of the ceremony.
5. On success, the new master key appears in the list, and each mobile signer sees a confirmation on the device.

Create Your First Wallet

1. Navigate to Wallets → Create Wallet.
2. Enter a name (e.g., “Treasury - Operating”).
3. Select blockchain networks (Ethereum, Bitcoin, TRON).
4. Click Create — deposit addresses are available immediately.

See Creating Wallets.

Configure Policies

Navigate to Policies and configure:

• Whitelist — permitted destination addresses
• Transaction limits — per-transaction and daily caps
• Approval quorum — the number of approvals required for high-value transactions

See Policy Engine.

Set Up API Integration

1. Navigate to Settings → API Keys → Create API Key.
2. Assign a name. The key is authorised for your profile; access is profile-scoped (there are no per-endpoint permission scopes).
3. Copy the key (displayed only once).

curl -X GET https://yourcompany.thevault.io/api/v1/profiles/{profile_id}/wallets \
  -H "X-API-Key: <your-api-key>"

For webhooks, register your endpoint in Settings → Webhooks. See Authentication and Webhooks.

Send a Test Transaction

1. Deposit a small amount to your wallet address.
2. Wait for confirmation (dashboard and webhooks notify you).
3. Initiate an outgoing transaction to a whitelisted address.
4. Mobile signers receive a push notification and approve with their app PIN.
5. Transaction is signed and broadcast to the blockchain.