---
title: "Initiate credential recovery"
method: POST
path: "/v1/auth/credential-recovery/request"
tags: ["Credential Recovery"]
---

# Initiate credential recovery

`POST /v1/auth/credential-recovery/request`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/auth/credential-recovery/request`
- Auth: HTTP bearer

Start a credential recovery request for MFA reset, passkey reset,
or password reset. Requires admin approval per org policy.

## Request body

- CredentialRecoveryRequest
  - `recovery_type` 'mfa_reset' | 'passkey_reset' | 'password_reset', required
  - `reason` string: Optional justification for the recovery request

## Response `201`

Recovery request created

- CredentialRecoveryResponse
  - `request_id` string, uuid
  - `status` 'pending_approval' | 'approved' | 'rejected' | 'expired'
  - `recovery_type` 'mfa_reset' | 'passkey_reset' | 'password_reset'
  - `created_at` string, date-time

## Other responses

- `400`: Invalid request
- `401`: Authentication required or invalid

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)