Skip to main content
POST
Replace passkey recovery codes
A signed-in human session with recent authentication is required. Complete password/passkey reauthentication when requested. Requires a passkey verification within the last ten minutes and an existing passkey. Returns newly generated one-time codes; retain them privately. Request conventions · API keys · MCP connections

Authorizations

posted_session
string
cookie
required

Signed-in human browser session; mutation requests also need the exact UI Origin

Headers

Origin
string<uri>
required

The exact configured Posted UI origin. Required for browser mutations carrying session cookies.

Body

application/json

The body is of type object.

Response

Successful response. Examples are illustrative; field values vary by record.

recoveryCodes
string[]