Skip to main content
POST
Called by a Tower on first boot (by the device-agent firstboot subcommand). The box announces its claim code, its X25519 public key (used to seal inbound payloads to the box), and a hash of its device token. Unauthenticated — the claim code is the shared secret. Idempotent: a second announce with the same claim code returns 200 instead of 201.

Request Body

Self-hosted only. In the cloud this route is inert. After announcing, the device polls GET /v1/devices/claim/{code} until an owner claims it. See claim & provisioning.