Skip to main content
Cloud keys are a web-based unlock access method. When you use a cloud key, the door unlocks over the internet through the ACS cloud connection. Each unlock is attributed to the specific user identity in the ACS audit trail, rather than being recorded as a generic system action. Cloud keys are ideal for:
  • Web pass shared via link: Send your user a URL that triggers a remote unlock when tapped.
  • Embedded unlock in your app: Add an unlock button to your web or mobile app that calls the Seam API to unlock the door.

​
Before You Begin

To use cloud keys, you need:
  • A Seam API key
  • A connected ACS that supports cloud key unlocks
  • A user identity representing the person who will unlock the door
  • An entrance that supports cloud key unlocks (can_unlock_with_cloud_key is true)

​
Step 1: Verify Entrance Support

List the entrances for your ACS and confirm that can_unlock_with_cloud_key is true for the entrance you want to unlock. 
const entrances = await seam.acs.entrances.list({
  acs_system_id: 'c359cba2-8ef2-47fc-bee0-1c7c2a886339',
})

const cloudKeyEntrances = entrances.filter(
  (e) => e.can_unlock_with_cloud_key
)
Output: 
[
  {
    "acs_entrance_id": "f74e4879-5991-4e2f-a368-888983dcfbfc",
    "display_name": "Main Entrance",
    "can_unlock_with_cloud_key": true,
    ...
  }
]

​
Step 2: Create an Access Grant with a Cloud Key

Create an Access Grant for the user identity, specifying cloud_key as the requested access method mode. Include the entrance IDs that the user should be able to unlock. 
const accessGrant = await seam.accessGrants.create({
  user_identity_id: '22222222-2222-2222-2222-222222222222',
  acs_entrance_ids: ['f74e4879-5991-4e2f-a368-888983dcfbfc'],
  requested_access_methods: [
    { mode: 'cloud_key' }
  ],
})
Output: 
{
  "access_grant_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "user_identity_id": "22222222-2222-2222-2222-222222222222",
  "access_method_ids": ["99887766-5544-3322-1100-aabbccddeeff"],
  "requested_access_methods": [
    { "mode": "cloud_key" }
  ],
  ...
}

​
Step 3: See Which Doors an Access Method Covers

An access method can cover multiple doors — for example, if the Access Grant includes several entrances or spaces. To see which doors a cloud key can unlock, call /access_methods/get_related. 
const related = await seam.accessMethods.getRelated({
  access_method_ids: [accessMethod.access_method_id],
})

console.log(related.acs_entrances) // entrances this cloud key can unlock

​
Step 4: Unlock the Entrance

Once the access grant is active, unlock the entrance on behalf of the user by calling /access_methods/unlock_door with the cloud key access_method_id and the acs_entrance_id. The endpoint resolves the credential internally and attributes the unlock to the user identity in the ACS audit trail. 
const actionAttempt = await seam.accessMethods.unlockDoor({
  access_method_id: '99887766-5544-3322-1100-aabbccddeeff',
  acs_entrance_id: 'f74e4879-5991-4e2f-a368-888983dcfbfc',
})
Output: 
{
  "action_attempt_id": "5f4e3d2c-1b0a-9f8e-7d6c-5b4a3c2d1e0f",
  "action_type": "UNLOCK_DOOR",
  "status": "success",
  "result": { "was_confirmed_by_device": false },
  "error": null
}
The unlock event appears in the ACS audit trail attributed to the specific user identity, not as a generic system action.

​
Next Steps