{"uid":"cap_Bjxr2ambgzxoUBQJ1HLiU","slug":"halowerk-sicherwerk-cms-envelopeddata-encrypt-f92efcf4","name":"HALOWERK sicherwerk CMS EnvelopedData Encrypt","description":"Wraps the supplied bytes in a CMS EnvelopedData envelope using the pinned OpenSSL build, addressed to every recipient certificate you pass in. A single content-encryption key protects the payload and is itself encrypted once per recipient, so any one holder of a matching private key can decrypt, and nobody else can. The reply names the cipher actually used and the recipient count, so an agent can record what it produced rather than assume it.","url":"https://sicher.halowerk.com/v1/oss-openssl-cms-envelope-encrypt?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType"],"properties":{"type":{"const":"http"},"method":{"const":"POST"},"bodyType":{"const":"json"},"schemaUrl":{"type":"string","format":"uri"},"exampleUrl":{"type":"string","format":"uri"}},"additionalProperties":true},"output":{"type":"object","required":["type"],"properties":{"type":{"const":"json"},"schemaUrl":{"type":"string","format":"uri"},"exampleUrl":{"type":"string","format":"uri"}},"additionalProperties":true}},"additionalProperties":true},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_a0DitWVA1QeE-Zmy-oaBq","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Wraps arbitrary bytes in a CMS EnvelopedData envelope using a pinned OpenSSL build, encrypting for one or more recipient certificates so only holders of matching private keys can decrypt.","exampleAgentPrompt":"Encrypt this payload for the following two recipient certificates using CMS EnvelopedData — I need to know what cipher was used and how many recipients were wrapped, so I can log what was produced.","exampleUseCases":[{"title":"Secure document delivery to multiple parties","prompt":"I need to encrypt a sensitive contract so that both our legal team and the counterparty can each decrypt it with their own private keys — wrap it in a CMS EnvelopedData envelope addressed to both of their certificates and tell me which cipher was used."},{"title":"Agent pipeline encrypted payload handoff","prompt":"My workflow needs to pass an encrypted blob to the next stage — take this JSON payload, encrypt it using CMS EnvelopedData for the recipient certificate I'm providing, and give me back the envelope along with the cipher name so I can record it in the audit log."},{"title":"S/MIME encrypted message preparation","prompt":"Prepare an S/MIME-style encrypted message for these three recipient certs — wrap the email body bytes in a CMS envelope using OpenSSL so any one of the three recipients can decrypt it with their private key, and confirm the recipient count in the response."}],"resultDescription":"A CMS EnvelopedData structure (envelope) containing the encrypted payload, along with the name of the symmetric cipher actually used for content encryption and the number of recipients the content-encryption key was wrapped for.","failureModes":["Invalid or malformed recipient certificate causes envelope construction failure","Unsupported certificate key type rejected by the pinned OpenSSL build","Missing required input bytes or empty payload returns validation error","Certificate not yet valid or expired may be rejected","Mismatched or corrupted input encoding causes parsing error"],"whenToPreferThis":"Choose this endpoint when you need deterministic, auditable CMS EnvelopedData encryption using a pinned OpenSSL build — particularly when you need multi-recipient encryption (one CEK per payload, one KEK per recipient), want the response to confirm the cipher and recipient count for logging, or are building PKI/S/MIME workflows that require a verifiable, reproducible cryptographic tool rather than a general-purpose library.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T00:33:37.265Z","isFirstParty":false,"canonicalSlug":"halowerk-sicherwerk-cms-envelopeddata-encrypt-f92efcf4"}