Skip to main content
DELETE
Remove a passkey
A signed-in human session with recent authentication is required. Complete password/passkey reauthentication when requested. Removes an owned WebAuthn credential. Removing the last passkey also removes its recovery codes. The path ID is the credential ID, not a UUID. Request conventions · API keys · MCP connections

Authorizations

posted_session
string
cookie
required

Signed-in human browser session; mutation requests also need the exact UI Origin

Headers

Origin
string<uri>
required

The exact configured Posted UI origin. Required for browser mutations carrying session cookies.

Path Parameters

id
string
required

The id from the corresponding list, record or authorization response.

Response

Successful response. Examples are illustrative; field values vary by record.

ok
boolean