List vaults - Kraken Developers

List vaults

curl --request GET \
  --url https://api.kraken.com/v0/insto/custody/vaults \
  --header 'api-key: <api-key>' \
  --header 'api-nonce: <api-key>' \
  --header 'api-sign: <api-key>'

import requests

url = "https://api.kraken.com/v0/insto/custody/vaults"

headers = {
    "api-key": "<api-key>",
    "api-sign": "<api-key>",
    "api-nonce": "<api-key>"
}

response = requests.get(url, headers=headers)

print(response.text)

const options = {
  method: 'GET',
  headers: {'api-key': '<api-key>', 'api-sign': '<api-key>', 'api-nonce': '<api-key>'}
};

fetch('https://api.kraken.com/v0/insto/custody/vaults', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.kraken.com/v0/insto/custody/vaults"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("api-key", "<api-key>")
	req.Header.Add("api-sign", "<api-key>")
	req.Header.Add("api-nonce", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "result": [
    {
      "id": "VW44KPQC4C62K6",
      "iiban": "AA88 N84G AET3 RAOA",
      "name": "My Vault 1",
      "status": "created",
      "quote_value_change_24h": "1.50",
      "missing_rates": [
        {
          "asset": "XBT",
          "asset_class": "currency"
        }
      ],
      "attributes": [
        "token_vesting"
      ],
      "quote_value": "1000.0000",
      "deposit_lock_rekeying_only": false,
      "otc_enabled": true
    }
  ],
  "total": 1,
  "quote_asset": "USD"
}

{
  "type": "tag:kraken.com,2025:BadRequest",
  "status": 400,
  "title": "Bad Request",
  "data": {
    "message": "Request failed validation."
  },
  "detail": "Request failed validation.",
  "instance": "https://debug.kraken.com/req/01HXYZABCDEF"
}

{
  "type": "tag:kraken.com,2025:PermissionDenied",
  "status": 403,
  "title": "Forbidden",
  "data": {
    "message": "Permission denied."
  },
  "detail": "The caller is not authorized to perform this action.",
  "instance": "https://debug.kraken.com/req/01HXYZABCDEF"
}

{
  "type": "tag:kraken.com,2025:gateway/ReadUpstream",
  "status": 500,
  "title": "Internal Server Error",
  "data": {},
  "detail": "Failed to read response from upstream service.",
  "instance": "https://debug.kraken.com/req/01HXYZABCDEF"
}

{
  "type": "tag:kraken.com,2025:gateway/Connect",
  "status": 503,
  "title": "Service Unavailable",
  "data": {},
  "detail": "Downstream custody service is temporarily unreachable; retry with backoff.",
  "instance": "https://debug.kraken.com/req/01HXYZABCDEF"
}

GET

insto

custody

vaults

List vaults

curl --request GET \
  --url https://api.kraken.com/v0/insto/custody/vaults \
  --header 'api-key: <api-key>' \
  --header 'api-nonce: <api-key>' \
  --header 'api-sign: <api-key>'

import requests

url = "https://api.kraken.com/v0/insto/custody/vaults"

headers = {
    "api-key": "<api-key>",
    "api-sign": "<api-key>",
    "api-nonce": "<api-key>"
}

response = requests.get(url, headers=headers)

print(response.text)

const options = {
  method: 'GET',
  headers: {'api-key': '<api-key>', 'api-sign': '<api-key>', 'api-nonce': '<api-key>'}
};

fetch('https://api.kraken.com/v0/insto/custody/vaults', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.kraken.com/v0/insto/custody/vaults"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("api-key", "<api-key>")
	req.Header.Add("api-sign", "<api-key>")
	req.Header.Add("api-nonce", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "result": [
    {
      "id": "VW44KPQC4C62K6",
      "iiban": "AA88 N84G AET3 RAOA",
      "name": "My Vault 1",
      "status": "created",
      "quote_value_change_24h": "1.50",
      "missing_rates": [
        {
          "asset": "XBT",
          "asset_class": "currency"
        }
      ],
      "attributes": [
        "token_vesting"
      ],
      "quote_value": "1000.0000",
      "deposit_lock_rekeying_only": false,
      "otc_enabled": true
    }
  ],
  "total": 1,
  "quote_asset": "USD"
}

{
  "type": "tag:kraken.com,2025:BadRequest",
  "status": 400,
  "title": "Bad Request",
  "data": {
    "message": "Request failed validation."
  },
  "detail": "Request failed validation.",
  "instance": "https://debug.kraken.com/req/01HXYZABCDEF"
}

{
  "type": "tag:kraken.com,2025:PermissionDenied",
  "status": 403,
  "title": "Forbidden",
  "data": {
    "message": "Permission denied."
  },
  "detail": "The caller is not authorized to perform this action.",
  "instance": "https://debug.kraken.com/req/01HXYZABCDEF"
}

{
  "type": "tag:kraken.com,2025:gateway/ReadUpstream",
  "status": 500,
  "title": "Internal Server Error",
  "data": {},
  "detail": "Failed to read response from upstream service.",
  "instance": "https://debug.kraken.com/req/01HXYZABCDEF"
}

{
  "type": "tag:kraken.com,2025:gateway/Connect",
  "status": 503,
  "title": "Service Unavailable",
  "data": {},
  "detail": "Downstream custody service is temporarily unreachable; retry with backoff.",
  "instance": "https://debug.kraken.com/req/01HXYZABCDEF"
}

Authorizations

api-key

string

header

required

api-sign

string

header

required

api-nonce

string

header

required

Query Parameters

org_iiban

string

Restrict the result set to vaults owned by the specified organization, identified by its 16-char IIBAN. Defaults to the caller's organization when omitted.

quote_asset

string

Asset code used to value each vault's fiat balance (e.g. USD, EUR). Defaults to USD when omitted.

limit

integer<int32>

Maximum number of vaults to return in the page. Defaults to 100 when omitted.

offset

integer<int32>

Number of vaults to skip before the page begins, used together with limit for offset-based pagination. Defaults to 0 when omitted.

string[]

Restrict the result set to the supplied vault IDs. Each value is a V-prefixed 14-char base32 identifier with a final check character.

iiban

string[]

Restrict the result set to vaults whose IIBAN matches one of the supplied values. Each value is a 16-char alphanumeric IIBAN in 4x4 groups.

member

string[]

Restrict the result set to vaults that include the supplied member(s), each identified by their 16-char user IIBAN.

name

string

Filter vaults by name. Combined with name_match and name_case to control how the term is matched.

name_match

string

How the name term is matched against vault names. One of equals, starts_with, contains.

name_case

string

Case sensitivity of the name match. One of sensitive, insensitive.

default_approvals_left

integer<int32>

Lower bound (inclusive) for the vault's default required-approvals count.

default_approvals_right

integer<int32>

Upper bound (inclusive) for the vault's default required-approvals count.

created_at_from

string<date-time>

Include only vaults created at or after this RFC 3339 UTC timestamp (inclusive), e.g. 2026-01-15T12:34:56Z; the Z (UTC) offset is required.

created_at_to

string<date-time>

Include only vaults created at or before this RFC 3339 UTC timestamp (inclusive), e.g. 2026-01-15T12:34:56Z; the Z (UTC) offset is required.

updated_at_from

string<date-time>

Include only vaults last updated at or after this RFC 3339 UTC timestamp (inclusive), e.g. 2026-01-15T12:34:56Z; the Z (UTC) offset is required.

updated_at_to

string<date-time>

Include only vaults last updated at or before this RFC 3339 UTC timestamp (inclusive), e.g. 2026-01-15T12:34:56Z; the Z (UTC) offset is required.

sort

string

Ordering as a comma-separated list of field:direction tokens (direction optional, defaults to desc). Multiple columns are applied in order. Allowed fields: id, name, created_at, updated_at. Defaults to id:desc.

resolve_policies

string

When set to true, include each vault's otc_enabled policy flag in the response. Omitted otherwise.

Response

OK. Returns the page of vaults the caller can access, with pagination total and the resolved quote asset.

result

object[]

required

Page of vaults matching the request filters.

Show child attributes

total

integer<int32>

required

Total number of vaults matching the filters, ignoring pagination.

Example:

1

quote_asset

string

required

Quote asset code used to value the fiat balances.

Example:

"USD"

List balances Get vault balance

⌘I