Launchnodes / External Signer for Canton
Launchnodes / Canton external signing

Sign transactions securely in Canton. With Fireblocks custody.

External Signer lets your organisation securely sign, isolate and audit transactions for multiple party IDs to multiple vaults in one Fireblocks workspace.

Custody Fireblocks MPC
Secure isolated signing One vault per party ID
Interface JSON-RPC 2.0 over HTTPS
Design principle

Multiple Canton party IDs are mapped to multiple individual vaults in a single Fireblocks workspace, providing secure isolated signing for each party ID and every connected vault.

01 / Multiple party IDs connected to multiple vaults

Sign transactions using a single Fireblocks workspace with multiple vaults.

The external signer holds no assets and no private keys. Keys never leave Fireblocks. It stores only operational metadata: wallets, sessions, networks, tenant to vault mappings and transaction records.

External signer lets party IDs connect individual vaults in a single Fireblocks workspace, ensuring client keys and funds are isolated.

Launchnodes external signer Fireblocks
01Your application submits commands›
02Participant Party ID resolved to vault and key›
03Participant node prepares the transaction›
04Vault signs under its approval policy›
05Participant node re-verifies and commits›
02 / Why it matters

Isolation you can prove.

/ 01

Fireblocks keeps the keys

Signing happens inside each tenant’s Fireblocks vault, under that vault’s own approval policy. There is nothing to extract from the signer.

/ 02

Parties are not tied to a node

An externally signed party derives its identity from its own key rather than the hosting participant, so it can be hosted on your participant, on your customers’, or on ours.

/ 03

Command-agnostic by design

You send fully formed commands and any disclosed contracts; the signer forwards them unchanged.

/ 04

Slow signatures are never lost

Where an approval needs a human, the transaction is left pending rather than failed. Calling sign again polls the original request, so there is no duplicate approval.

/ 05

One record, four identifiers

Every transaction correlates your id, the command id, the custody request id and the ledger update id, with timestamps for preparation and signing.

03 / Boundaries

Commands in. Signatures out.

Your application
Supplies

Everything that depends on your business domain stays with you.

  • Daml commands, fully formed
  • Any disclosed contracts those commands reference
  • The acting wallet, and optionally actAs and readAs
  • Business-level validation
The external signer
Does

Everything between an authenticated request and a committed transaction, including the parts that are easy to get wrong.

  • Authenticates the caller over OIDC
  • Resolves wallet to vault to signing key
  • Prepares the transaction on the participant
  • Obtains the signature from custody, resumably
  • Normalises encodings, submits, records the result
04 / Speak to us

Tell us the isolation and mapping you need.

Tell us how you want to map party IDs to individual vaults to ensure signing and keys are isolated and auditable, and we will walk you through the deployment and the integration on your side of the boundary. Or run the solution as a fully managed service.

Corporate email required / Response within 2 working days
Read, Learn, Participate

71-75 Shelton Street, Covent Garden, London, England WC2H 9JQ

Copyright © 2026 Launchnodes Limited – All rights reserved.

Registration

Blockchains of most interest:(Required)
Contact Us

Contact us to learn more

Do you currently own Ethereum to stake?

Find out

Find out

Contact Us