---
title: "POST /accounts/2fa/verify/passkey/"
method: POST
path: "/accounts/2fa/verify/passkey/"
tags: ["accounts"]
---

# POST /accounts/2fa/verify/passkey/

`POST /accounts/2fa/verify/passkey/`

## Request

- Base URL: `http://localhost:8000`
- URL: `http://localhost:8000/accounts/2fa/verify/passkey/`
- Auth: one of:
  - API key in header `X-Api-Key`
  - API key in header `X-Secret-Key`

POST /accounts/2fa/verify/passkey/ - Verify passkey as 2FA during login.

## Request body

- TwoFactorPasskeyVerifyRequest
  - `challenge_token` string, uuid, required
  - `credential` object, required
  - `session_id` string

## Response `200`

OK

- AccountsTokenPairResponse
  - `access` string
  - `refresh` string
  - `requires_two_factor` boolean
  - `challenge_token` string, uuid
  - `methods` string[]
  - `requires_org_setup` boolean
  - `message` string
  - `new_org` boolean
  - `org_name` string
  - `is_first_login` boolean
  - `recovery_codes_warning` string

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `500`: Internal Server Error
- `default`: Default error response

---

[API](https://skmtc.dev/futureagi/apis/future-agi-management-api.md) · [All operations](https://skmtc.dev/futureagi/apis/future-agi-management-api/llms.txt) · [OpenAPI document](https://skmtc.dev/futureagi/apis/future-agi-management-api/revisions/c8684118e142?raw)