Skip to main content
POST
Use a passkey recovery code
No signed-in session is required. Endpoint-specific tokens, setup secrets or challenges may still be required. Consumes one recovery code against an active password-login challenge and creates a recovery-authenticated session. Request conventions · API keys · MCP connections

Body

application/json
challengeId
string
required
Pattern: ^[A-Za-z0-9_-]{43}$
code
string
required
Required string length: 1 - 100

Response

Successful response. Examples are illustrative; field values vary by record.

user
object
workspace
object