---
title: "Attest device challenge"
method: POST
path: "/v1/auth/devices/{device_id}/attest"
tags: ["Authentication"]
---

# Attest device challenge

`POST /v1/auth/devices/{device_id}/attest`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/auth/devices/{device_id}/attest`
- Auth: HTTP bearer

Submit a signed challenge nonce to complete step-up authentication.
Returns a short-lived step-up token that can be used for the bound action.

## Path parameters

- `device_id` string, uuid, required

## Request body

- AttestDeviceChallengeRequest
  - `challenge_nonce` string, required
  - `signature` string, required: Signature over the challenge nonce using the device's private key

## Response `200`

Attestation successful

- AttestDeviceChallengeResponse
  - `step_up_token` string, required: Short-lived token authorizing the bound action
  - `expires_at` string, date-time, required

## Other responses

- `400`: Invalid request
- `404`: Resource not found

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)