{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-user-guide/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["img","admonition"]},"redocly_category":"User Guide","type":"markdown"},"seo":{"title":"Connect a Paxos Custody Account"},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"connect-a-paxos-custody-account","__idx":0},"children":["Connect a Paxos Custody Account"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Connect your Paxos custody account to create custody vaults in Fordefi. You"," ","create an API credential in the Paxos dashboard, enter it in Fordefi, choose the"," ","Paxos profiles to connect, and approve the request on mobile."]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/paxos-api-key-setup.2490e9f229f76ee24b943bb4447e13928ef5e54fa21f829973931a9e84320bce.9c1bb791.png","framed":false,"withLightbox":false,"width":"700"},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"before-you-begin","__idx":1},"children":["Before you begin"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Admin role:"]}," Only admins can connect custody vaults."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["A Paxos custody account:"]}," If you don't have one, you can sign up with Paxos"," ","from the first step of the wizard."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Access to the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://dashboard.paxos.com/"},"children":["Paxos dashboard"]},":"]}," You need permission to configure API"," ","credentials there."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["The Fordefi mobile app:"]}," Connecting a custody vault requires"," ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/user-guide/admin-quorum"},"children":["admin quorum"]}," approval, which is possible from the mobile app."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"open-the-wizard","__idx":2},"children":["Open the wizard"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Open the Fordefi web console and click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Connected Accounts"]},". In the screen"," ","that appears, click the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Custody"]}," tab."]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/custody-vaults-list.a0b8aed743b83e12730d604a48404598099075d912d2c6495fb3a1a58037573d.9c1bb791.png","alt":"Connected Accounts page with the Custody tab selected","framed":false,"withLightbox":false,"width":"700","border":"1px solid lightgray"},"children":[]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Connect Account"]},"."]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-1-get-started-with-paxos","__idx":3},"children":["Step 1: Get started with Paxos"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Choose one of the following:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Don't have a Paxos account yet?"]}," Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create Account"]}," to sign up with"," ","Paxos. Return to Fordefi once your account is open."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Already have a Paxos account?"]}," Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Connect Account"]},"."]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/connect-custody-step1-get-started.7f6117a169d45d0a0c2526fa12815833f7cb7880e18815f11be57d9260a95f60.9c1bb791.png","alt":"Get Started with Paxos","framed":false,"withLightbox":false,"width":"500","border":"1px solid lightgray"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-2-create-api-credentials-in-paxos","__idx":4},"children":["Step 2: Create API credentials in Paxos"]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Canton vaults"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Before you start this procedure, contact Paxos support and provide them with the API key ID to enable signing on it."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Fordefi shows the values that your Paxos API credential needs. Each one has a"," ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Copy"]}," button."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Value"},"children":["Value"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Where it goes in Paxos"},"children":["Where it goes in Paxos"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Read permissions"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["API credential, read permissions panel"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Write permissions"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["API credential, write permissions panel"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allowable IP"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allowable IPs, as a CIDR block"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Public key"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Request Signing > Public Keys, algorithm EdDSA"]}]}]}]}]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In the Paxos dashboard, configure new API credential. See the"," ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://docs.paxos.com/guides/dashboard/admin/api"},"children":["Paxos guide to API credentials"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Permissions:"]}," Grant every read and write permission listed in Fordefi. In"," ","Paxos, use the search bar in each permissions panel to select them one by"," ","one."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Allowable IP:"]}," Below the permissions panels, enter the IP from Fordefi as"," ","a CIDR block (for example, ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["34.221.xx.xx/32"]},") and click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Request Signing:"]}," Turn on ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Request Signing"]},". Under ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Public Keys"]},","," ","click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add Public Key"]},", paste the public key from Fordefi and select the"," ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["EdDSA"]}," algorithm."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Save the credential in Paxos. In Fordefi, click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["I created the key"]},"."]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/connect-custody-step2-api-credentials.0351d1d90e1ada3711d91804853616d3140bfb22aff066b9d3e10d95400be3f2.9c1bb791.png","alt":"Create API Credentials","framed":false,"withLightbox":false,"width":"500","border":"1px solid lightgray"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-3-enter-your-paxos-credentials","__idx":5},"children":["Step 3: Enter your Paxos credentials"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Enter each value exactly as Paxos issued it, then click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Next"]},"."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Field"},"children":["Field"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Where to find it in Paxos"},"children":["Where to find it in Paxos"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Client ID"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Developer"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API Credentials"]},", then open the credential you created"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Client Secret"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Shown only once, when you create the API credential"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Public Key ID"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API Credentials"]}," > your credential > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Public Keys"]},", next to the key's nickname"]}]}]}]}]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/connect-custody-step3-paxos-credentials.d2e3f67e5c4a0f0b368eb7e4f6edc8f2ae74e7e4239f4c0e306e6c6396f9fb6d.9c1bb791.png","alt":"Paxos Credentials","framed":false,"withLightbox":false,"width":"500","border":"1px solid lightgray"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Fordefi validates the credentials. If any value is wrong, the wizard shows"," ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Some of your credentials are incorrect"]},". Check the values and try again."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Paxos shows the Client Secret only once. If you didn't copy it, create a new API"," ","credential."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-4-select-profiles","__idx":6},"children":["Step 4: Select profiles"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Each Paxos profile you select becomes a separate custody vault."]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Select the profiles to connect. Use ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Search"]}," to find a profile, or ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Select all"]},"."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Enter a vault name for each selected profile. Vault names must be unique in"," ","your organization. Leave unchanged to select the default."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add to vault group"]},", select a vault group for the new custody vaults. Leave unchanged to select the default."]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Send for Approval"]},"."]},{"$$mdtype":"Tag","name":"Image","attributes":{"src":"/assets/connect-custody-step4-select-profiles.db0d80a579952fad64e85a762f8e5444ebfbcd8171c67695c65d252e0f55c7e4.9c1bb791.png","alt":"Select Profiles","framed":false,"withLightbox":false,"width":"500","border":"1px solid lightgray"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-5-approve","__idx":7},"children":["Step 5: Approve"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Open the Fordefi mobile app and approve the request, then click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Done"]},". The"," ","new custody vaults stay pending until the admin quorum approves."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"whats-next","__idx":8},"children":["What's next"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/user-guide/custody/custody-vaults"},"children":["Work with custody vaults"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/user-guide/custody/custody-transfers"},"children":["Move funds to and from custody"]}]}]}]},"headings":[{"value":"Connect a Paxos Custody Account","id":"connect-a-paxos-custody-account","depth":1},{"value":"Before you begin","id":"before-you-begin","depth":2},{"value":"Open the wizard","id":"open-the-wizard","depth":2},{"value":"Step 1: Get started with Paxos","id":"step-1-get-started-with-paxos","depth":2},{"value":"Step 2: Create API credentials in Paxos","id":"step-2-create-api-credentials-in-paxos","depth":2},{"value":"Step 3: Enter your Paxos credentials","id":"step-3-enter-your-paxos-credentials","depth":2},{"value":"Step 4: Select profiles","id":"step-4-select-profiles","depth":2},{"value":"Step 5: Approve","id":"step-5-approve","depth":2},{"value":"What's next","id":"whats-next","depth":2}],"frontmatter":{"seo":{"title":"Connect a Paxos Custody Account"}},"lastModified":"2026-10-18T12:22:43.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/user-guide/custody/connect-paxos-custody","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}