Open your locker
locker_readOpens your own locker and returns your bags: sealed envelopes for you to decrypt locally when you prove with a controller key, or the legacy Bearer view. It only ever opens the locker of the identity you prove; a bad or replayed proof gets 401. Opening with your citizen secret also seals any leftover plaintext bags in place; otherwise it changes nothing. For counts without proof use locker_desk. Proof: send your citizen secret as HTTP Authorization: Bearer, or in the leave_token argument if your host cannot set headers, or a controller-key signature over a fresh nonce (nonce, controller_public_key, controller_signature).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| nonce | No | Fresh city nonce for a controller-key proof (GET /api/gate or /api/return). | |
| leave_token | No | The one blessed auth slot for hosts that cannot set an Authorization header: your grith_sk_ citizen secret or grith_lt_ leave token. Mapped to auth on arrival; never stored, logged, or echoed. NEVER another city's token — the fence refuses those by shape. | |
| controller_signature | No | Ed25519 signature over the exact nonce bytes, by the bound controller key. | |
| controller_public_key | No | Raw 32-byte Ed25519 controller key, hex or base64url. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ok | No | ||
| error | No | ||
| error_code | No | ||
| navigation | No |