Triggering Delegation

In your application, when a user is logged in, you’ll want to request delegation so your server can act on their behalf (for example, to sign transactions or run automated flows).

Check delegation status

Use hasDelegatedAccess to check whether a wallet account already has delegated access before triggering the delegation flow.

import { getWalletAccounts } from '@dynamic-labs-sdk/client';
import { hasDelegatedAccess } from '@dynamic-labs-sdk/client/waas';

const walletAccounts = getWalletAccounts();
const walletAccount = walletAccounts[0];

const isDelegated = hasDelegatedAccess({ walletAccount });
console.log('Has delegated access:', isDelegated);

Trigger delegation

Use delegateWaasKeyShares to initiate the delegation process for a wallet account. This sends the encrypted delegated share to your server via the wallet.delegation.created webhook.

import { getWalletAccounts } from '@dynamic-labs-sdk/client';
import { delegateWaasKeyShares } from '@dynamic-labs-sdk/client/waas';

const walletAccounts = getWalletAccounts();
const walletAccount = walletAccounts[0];

await delegateWaasKeyShares({ walletAccount });

With password encryption

If the wallet uses password encryption, pass the password when delegating. The delegated share will be encrypted with the password before being sent.

import { getWalletAccounts } from '@dynamic-labs-sdk/client';
import { delegateWaasKeyShares } from '@dynamic-labs-sdk/client/waas';

const walletAccounts = getWalletAccounts();
const walletAccount = walletAccounts[0];

await delegateWaasKeyShares({ walletAccount, password: 'user-password' });

Dynamic does not prompt the user for a password during delegation. If the wallet is password-protected, you must obtain the password in your own UI flow and pass it programmatically.

Seed initial policy rules

You can seed the delegated signer’s policy layer at delegation time by passing initialSignerRules. Build each rule with buildAllowPolicyRule or buildDenyPolicyRule.

JavaScript
React

import {
  buildDenyPolicyRule,
  delegateWaasKeyShares,
} from '@dynamic-labs-sdk/client/waas';

await delegateWaasKeyShares({
  walletAccount,
  initialSignerRules: [
    buildDenyPolicyRule({
      name: 'Block private key export',
      chain: 'EVM',
      chainIds: [1],
      operationRestrictions: { blockExport: true },
    }),
  ],
});

import { useDelegateWaasKeyShares } from '@dynamic-labs-sdk/react-hooks';
import { buildDenyPolicyRule } from '@dynamic-labs-sdk/client/waas';

const DelegateWithRule = ({ walletAccount }) => {
  const { mutate, isPending } = useDelegateWaasKeyShares();

  return (
    <button
      disabled={isPending}
      onClick={() =>
        mutate({
          walletAccount,
          initialSignerRules: [
            buildDenyPolicyRule({
              name: 'Block private key export',
              chain: 'EVM',
              chainIds: [1],
              operationRestrictions: { blockExport: true },
            }),
          ],
        })
      }
    >
      Delegate with rule
    </button>
  );
};

initialSignerRules uses the raw WaasPolicyRule shape, not the PolicyRules map used by createPolicy. After delegation, you can read or update the delegated signer layer with getPolicy and createPolicy.

Parameters

Parameter	Type	Required	Description
`walletAccount`	`WalletAccount`	Yes	The WaaS wallet account to delegate
`password`	`string`	No	Password for wallets using password encryption
`initialSignerRules`	`WaasPolicyRule[]`	No	Rules to seed the delegated signer’s policy layer

What's next?

Learn how to receive the delegation materials on your server

Installation & Configuration

Chains & Networks

Authenticate

User & Session Management

Business Accounts

Wallets

Flow

Swaps

Funding & Onramp

Events

Building UI

Migrating from React

Extension Development

Triggering Delegation

Check delegation status

Trigger delegation

With password encryption

Seed initial policy rules

Parameters

What's next?

​Check delegation status

​Trigger delegation

​With password encryption

​Seed initial policy rules

​Parameters

What's next?

Check delegation status

Trigger delegation

With password encryption

Seed initial policy rules

Parameters