---
title: "Get pending passkey update"
method: GET
path: "/users/@me/mfa/webauthn/migration"
tags: ["Users"]
---

# Get pending passkey update

`GET /users/@me/mfa/webauthn/migration`

Return the passkey this session can update to the new domain after using it within the last five minutes, or null.

## Response `200`

Success

- PasskeyMigrationResponse
  - `pending` object, nullable, required — The passkey this session can update, or null
    - `credential_id` string, required — ID of the passkey waiting to be updated
    - `name` string, required — User-assigned name of the passkey
    - `cross_device` boolean, required — Whether the passkey was used from another device

## Other responses

- `400` — Bad Request - The request was malformed or contained invalid data
- `401` — Unauthorized - Authentication is required or the token is invalid
- `403` — Forbidden - You do not have permission to perform this action
- `429` — Too Many Requests - You are being rate limited
- `500` — Internal Server Error - An unexpected error occurred

## Changes

> 21 revisions in range; 2 not diffed.

- **2026-09-26** `3d3fd6ec1785` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/fluxer/apis/fluxer-api/changes/users/@me/mfa/webauthn/migration/get.md)

---

[API](https://skmtc.dev/fluxer/apis/fluxer-api.md) · [All operations](https://skmtc.dev/fluxer/apis/fluxer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/fluxer/apis/fluxer-api/revisions/3d3fd6ec1785?raw)