---
title: "Returns a short-lived `passkey_token` for the `X-Passkey-Token` header on secret reads."
method: POST
path: "/v1/auth/passkeys/vault-assert/complete"
tags: ["Auth"]
---

# Returns a short-lived \`passkey_token\` for the \`X-Passkey-Token\` header on secret reads.

`POST /v1/auth/passkeys/vault-assert/complete`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/auth/passkeys/vault-assert/complete`
- Auth: HTTP bearer

## Request body

- object
  - `credential_id` string, required
  - `authenticator_data` string, required
  - `client_data_json` string, required
  - `signature` string, required

## Response `200`

Success

## Other responses

- `401`: Unauthenticated
- `403`: Forbidden, or the plan does not include this
- `404`: Not found

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/ae109b496830?raw)