Skip to main content

Partner Integration

Partners integrate with Loyva by using API keys to authenticate server-to-server requests. Partner endpoints are scoped and isolated — you can only access resources within your organization.

Integration architecture

┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐
│ Partner Backend │ │ Loyva API │ │ Loyva Vault │
│ │ │ │ │ │
│ X-API-Key: lk_.. │────────>│ /partner/* │────────>│ Storage │
│ │<────────│ Scoped by org │<────────│ Compliance │
│ │ │ │ │ │
└──────────────────┘ └──────────────────┘ └──────────────────┘
│ │
│ Webhook events │ Embed tokens (in progress)
│<────────────────────────────│
│ │
│ ┌──────────────────┐│
│ │ User's Browser ││
│────────>│ Loyva signing │<─────────────────────
│ iframe (WIP) │ iframe
└──────────────────┘

What you get

FeatureEndpointScope required
Create envelopesPOST /partner/envelopesenvelopes:write
List envelopesGET /partner/envelopesenvelopes:read
Check statusGET /partner/envelopes/:id/statusenvelopes:read
Get signing linksGET /partner/envelopes/:id/signing-linksenvelopes:read
Embed widgets (SDK in progress)POST /embed/tokenesign:write or vault:read
View vault documentsGET /partner/envelopes/:id/vault/signed-urlvault:read
View backup copyGET /partner/envelopes/:id/vault/copy/signed-urlvault:read
Check complianceGET /partner/envelopes/:id/compliancecompliance:read
Get certificatesGET /partner/envelopes/:id/vault/certificatecompliance:read
Receive webhooksOutbound to your URLConfigured per key

Getting started

  1. Get an API key from your Loyva point of contact (see API Keys)
  2. Test with the API — create an envelope, send it for signing
  3. Configure webhooks — get real-time updates on envelope events
  4. Go live — swap dev keys for production keys
info

Embedded signing and vault widgets are on the roadmap. The POST /embed/token endpoint is live (see Embed tokens), but the companion JavaScript SDK and iframe host are not yet published. Coordinate with your Loyva point of contact if you need embedded signing.