---
title: "Mint a passkey sign-in challenge for the management surface"
method: POST
path: "/approvals/session/options"
tags: ["approvals"]
---

# Mint a passkey sign-in challenge for the management surface

`POST /approvals/session/options`

## Request

- Base URL: `https://api.bubblio.dev`
- URL: `https://api.bubblio.dev/approvals/session/options`
- Auth: none declared

Random single-use challenge (authentication, not consent-over-terms), 5-minute TTL.

## Response `200`

WebAuthn request options.

- object
  - `options` object
    - `challenge` string
    - `rpId` string
    - `timeout` integer
    - `userVerification` string
    - `allowCredentials` unknown[]
      - unknown

## Other responses

- `429`: Per-IP ceiling tripped.

---

[API](https://skmtc.dev/bubblio/apis/bubblio-agent-door-api.md) · [All operations](https://skmtc.dev/bubblio/apis/bubblio-agent-door-api/llms.txt) · [OpenAPI document](https://skmtc.dev/bubblio/apis/bubblio-agent-door-api/revisions/d858aff9c01d?raw)