# Turboshop Ephemeral Key Vault

> Turboshop Ephemeral Key Vault is a paid API for AI agents from turboshop.ai, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-19).

Issues, rotates, signs with, verifies, and revokes short-lived cryptographic session keys (secp256k1, Ed25519, HMAC-SHA256) with verifiable rotation chain attestation for AI agents.

## Facts

- Endpoint: GET https://turboshop.ai/api/v1/products/prod-ephemeral-key-vault/buy?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/turboshop-ephemeral-key-vault-b5928669
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_HRIb8jzAiab6bMtHSIni_

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability turboshop-ephemeral-key-vault-b5928669
```

Example prompt: Rotate my secp256k1 session key for agent 'agent-007', revoke the old key with ID 'key-abc123', and set the new key's TTL to 1800 seconds.

## When to prefer this

Choose this endpoint when an AI agent or multi-agent swarm needs short-lived, cryptographically verifiable session keys with built-in rotation and revocation — especially for EVM-compatible (secp256k1) or Ed25519 use cases. Prefer it over static key stores when ephemeral, auditable key lifecycle management with rotation-chain attestation is required.

## Known failure modes

- Invalid or expired previous_key_id returns 404 or key-not-found error
- Unsupported algorithm enum value returns validation error
- TTL out of allowed range returns parameter error
- Payload missing when action is sign or verify returns missing-parameter error
- Payment failure (x402) prevents key issuance
- Agent_id not provided when required returns auth/session error

## How this service works

Real working cryptographic microservice that issues, rotates, signs with, verifies, and revokes short-lived ephemeral session keys (secp256k1 EVM, Ed25519, HMAC-SHA256) with verifiable rotation chain attestation.

## Output

Returns an ephemeral key object including a key_id, the public key or HMAC token, expiry timestamp, rotation chain attestation (linking to previous key if rotated), and for sign/verify actions a signature or boolean verification result. Status queries return the current state and remaining TTL of the specified key.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "action": {
   "enum": [
    "rotate",
    "sign",
    "verify",
    "revoke",
    "status"
   ],
   "type": "string",
   "description": "Vault operation to execute (default: rotate)"
  },
  "payload": {
   "type": "string",
   "description": "Optional payload string to sign or verify"
  },
  "agent_id": {
   "type": "string",
   "description": "Calling agent or session identifier"
  },
  "algorithm": {
   "enum": [
    "secp256k1",
    "ed25519",
    "hmac-sha256"
   ],
   "type": "string",
   "description": "Cryptographic key algorithm (default: secp256k1)"
  },
  "ttl_seconds": {
   "type": "integer",
   "description": "Ephemeral key TTL in seconds (default: 3600)"
  },
  "previous_key_id": {
   "type": "string",
   "description": "Optional key_id to rotate from and automatically revoke"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/turboshop-ephemeral-key-vault-b5928669/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from turboshop.ai](https://www.zero.xyz/host/turboshop.ai/llms.txt)