> ## Documentation Index
> Fetch the complete documentation index at: https://www.posted.cc/llms.txt
> Use this file to discover all available pages before exploring further.

# List passkeys

> Lists the user's passkeys and remaining recovery-code count.

A signed-in human session is required. API keys and MCP bearer credentials cannot replace that session.

Lists the user's passkeys and remaining recovery-code count.

[Request conventions](/api-reference/overview) · [API keys](/api-keys) · [MCP connections](/mcp-connections)


## OpenAPI

````yaml api-reference/openapi.json GET /api/auth/passkeys
openapi: 3.1.0
info:
  title: Posted HTTP API
  version: 0.2.0
  description: >-
    All registered application, account, OAuth, MCP transport and health
    endpoints. Publishing and draft request schemas come from the shared runtime
    validators. Replace the example server with your installation. Documentation
    uses simple request examples and does not execute live publishing requests.
servers:
  - url: https://posted-api.example.com
security: []
paths:
  /api/auth/passkeys:
    get:
      tags:
        - Passkeys and recovery
      summary: List passkeys
      description: >-
        Lists the user's passkeys and remaining recovery-code count.


        A signed-in human session is required. API keys and MCP bearer
        credentials cannot replace that session.
      operationId: get_api_auth_passkeys
      responses:
        '200':
          description: >-
            Successful response. Examples are illustrative; field values vary by
            record.
          content:
            application/json:
              schema:
                type: object
                properties:
                  items:
                    type: array
                    items:
                      type: object
                      properties:
                        id:
                          type: string
                        name:
                          type: string
                        createdAt:
                          type: string
                      additionalProperties: true
                  recoveryCodeCount:
                    type: integer
                additionalProperties: true
              example:
                items:
                  - id: example-webauthn-credential-id
                    name: Studio laptop
                    createdAt: '2027-01-18T09:30:00.000Z'
                recoveryCodeCount: 8
        default:
          description: >-
            Request failure. Inspect code, message and requestId; respect
            Retry-After on HTTP 429.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
        - sessionCookie: []
components:
  schemas:
    Error:
      type: object
      required:
        - error
      properties:
        error:
          type: object
          required:
            - code
            - message
            - requestId
          properties:
            code:
              type: string
            message:
              type: string
            requestId:
              type: string
  securitySchemes:
    sessionCookie:
      type: apiKey
      in: cookie
      name: posted_session
      description: >-
        Signed-in human browser session; mutation requests also need the exact
        UI Origin

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.