---
title: "Create step-up auth challenge"
method: POST
path: "/v1/auth/devices/{device_id}/challenge"
tags: ["Authentication"]
---

# Create step-up auth challenge

`POST /v1/auth/devices/{device_id}/challenge`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/auth/devices/{device_id}/challenge`
- Auth: HTTP bearer

Creates a cryptographic challenge bound to a specific action (e.g. approving
a high-risk transaction). The device signs the challenge nonce to prove
possession of the private key.

## Path parameters

- `device_id` string, uuid, required

## Request body

- CreateDeviceChallengeRequest
  - `action` string, required: The action this challenge authorizes (e.g. "approve_transaction")
  - `target_id` string, required: ID of the resource the action targets

## Response `200`

Challenge created

- DeviceChallengeResponse
  - `challenge_nonce` string, required
  - `expires_at` string, date-time, required
  - `action_bound_hash` string, required: SHA-256 binding the challenge to the requested action and target

## Other responses

- `404`: Resource not found

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)