diff --git a/src/lib/components/layouts/sidebar-layout/components/notification-item.svelte b/src/lib/components/layouts/sidebar-layout/components/notification-item.svelte
index aa3b947..d0ec3bf 100644
--- a/src/lib/components/layouts/sidebar-layout/components/notification-item.svelte
+++ b/src/lib/components/layouts/sidebar-layout/components/notification-item.svelte
@@ -67,11 +67,15 @@
 
       const data = stringToEncryptedData(item.metaData?.encryptedPayload);
       if (data) {
-        // decrypted = await $staffCrypto.crypto.decryptStaff({
-        //   data,
-        //   // TODO: Add proper staffKeyShare
-        //   staffKeyShare: "",
-        // });
+        // GET /api/tenants/[id]/appointments/tunnels/[tunnelId]/staff-key-share/+server.ts
+
+        // Select currently in use passkey staff-key-share OR the first one for now
+
+        decrypted = await $staffCrypto.crypto.decryptStaff({
+          data,
+          // TODO: Add proper staffKeyShare
+          staffKeyShare: "",
+        });
       }
     }
   };
diff --git a/src/routes/api/tenants/[id]/appointments/tunnels/[tunnelId]/staff-key-share/+server.ts b/src/routes/api/tenants/[id]/appointments/tunnels/[tunnelId]/staff-key-share/+server.ts
new file mode 100644
index 0000000..5073fac
--- /dev/null
+++ b/src/routes/api/tenants/[id]/appointments/tunnels/[tunnelId]/staff-key-share/+server.ts
@@ -0,0 +1,8 @@
+/*
+
+
+    Return
+    select encrypted_tunnel_key from client_tunnel_staff_key_share
+    where user_id = 'userId' and tunnel_id = 'tunnelId'
+
+*/