# Get the Co-Signer Settings

Your tenant's own MPC co-signer, if it has one, and whether tenant co-signers are available.

## Overview

- `enabled`: whether co-signers can be switched `on`; `false`: they cannot yet.
- `cosigner`: the settings, or `null` when none were saved — every MPC wallet is then Aurea's cosigner's. `mode`, `urls`, `caFingerprints` (the pinned certificates' SHA-256, lower-case hex; `[]`: the system's CAs), `serverCredentialId`, `hmacSecretHint` (the secret's last four characters — never the secret), `boundWallets` (your MPC wallets made with it), `version`, `createdAt`, `updatedAt`. [Institution Callback & Co-Signer](https://docs.aureahub.com/docs/guide-institution-callback.md).
- For `owner`, `tenantadmin`, `non_signing_admin` and `security_admin`, on their own tenant.

## Endpoint

### `GET /v1/admin/tenants/{id}/mpc-cosigner`

Authentication: bearer token required.

The tenant's own MPC co-signer settings, null when none were saved.

**Path parameters**

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | string | yes | Tenant UUID |

**Responses**

`200` OK

```json
{
  "tenantId": "6f1e2d3c-4b5a-4968-8776-a5b4c3d2e1f0",
  "enabled": true,
  "cosigner": {
    "mode": "on",
    "urls": ["https://cosigner-a.example.com", "https://cosigner-b.example.com"],
    "caFingerprints": ["866807fcde9292fe40434e0ba408ffb389a4195842e9de91164991392f25f1f6"],
    "serverCredentialId": "2f6d8a4e-1c3b-4e5f-9a7d-0b2c4e6f8a1c",
    "hmacSecretHint": "Qx7v",
    "boundWallets": 12,
    "version": 3,
    "createdAt": "2026-10-14T08:10:41.502Z",
    "updatedAt": "2026-10-14T08:32:07.918Z"
  }
}
```

`200` None

```json
{
  "tenantId": "6f1e2d3c-4b5a-4968-8776-a5b4c3d2e1f0",
  "enabled": false,
  "cosigner": null
}
```

**Example request**

```bash
curl "https://api.aureahub.com/v1/admin/tenants/6f1e2d3c-4b5a-4968-8776-a5b4c3d2e1f0/mpc-cosigner" \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
```

---

Web version: https://docs.aureahub.com/#mpc-cosigner-get