---
title: "Begin passkey registration for the authenticated user"
method: POST
path: "/auth/passkeys/register/options"
tags: ["Auth"]
---

# Begin passkey registration for the authenticated user

`POST /auth/passkeys/register/options`

## Request

- Base URL: `https://api.medianfi.com/api/v1`
- URL: `https://api.medianfi.com/api/v1/auth/passkeys/register/options`
- Auth: one of:
  - HTTP bearer and API key in cookie `__Secure-median_refresh` and API key in cookie `__Secure-median_passkey_enrollment`
  - HTTP bearer and API key in cookie `__Secure-median_refresh`

Requires the exact access token, active HttpOnly refresh session, and separate short-lived one-shot enrollment grant issued by a successful email OTP verification for new or active registration. A completed response can be recovered with the same exact bearer and active refresh session only when they match its recent, unrevoked enrollment record. Logout revokes every registration binding.

## Headers

- `X-Median-App-Surface` 'qa'

## Request body

- EmptyPasskeyOptionsInput

## Response `200`

Browser registration options and an HttpOnly ceremony cookie. A retry can recover the same live ceremony or report that the passkey registration already completed.

- PasskeyRegistrationOptionsResponse
  - `success` true, required
  - `data` union, required
    - object
      - `options` object, required
    - object
      - `alreadyComplete` true, required
      - `verified` true, required
      - `credentialId` string, required

## Other responses

- `400`: Request body is not valid JSON
- `401`: The credential or one-shot ceremony is invalid, expired, or already used
- `404`: Onboarding v3 is disabled; the route is hidden
- `413`: Request body exceeds the passwordless route limit
- `415`: Request body charset or content encoding is unsupported
- `422`: Validation error
- `429`: Retry after the indicated number of seconds

---

[API](https://skmtc.dev/medianfi/apis/median-api.md) · [All operations](https://skmtc.dev/medianfi/apis/median-api/llms.txt) · [OpenAPI document](https://skmtc.dev/medianfi/apis/median-api/revisions/20090ea32b0d?raw)