Skip to main content
POST
Complete passkey registration
A signed-in human session with recent authentication is required. Complete password/passkey reauthentication when requested. Verifies the browser’s RegistrationResponseJSON against the stored challenge, origin and RP ID. The first passkey also returns recoveryCodes. Request conventions · API keys · MCP connections

Authorizations

posted_session
string
cookie
required

Signed-in human browser session; mutation requests also need the exact UI Origin

Headers

Origin
string<uri>
required

The exact configured Posted UI origin. Required for browser mutations carrying session cookies.

Body

application/json
challengeId
string
required
Pattern: ^[A-Za-z0-9_-]{43}$
response
object
required

WebAuthn RegistrationResponseJSON from the browser

name
string
required
Required string length: 1 - 120

Response

Successful response. Examples are illustrative; field values vary by record.

ok
boolean