---
title: "Register Passkey"
method: POST
path: "/v1/auth/webauthn/register"
tags: ["auth"]
---

# Register Passkey

`POST /v1/auth/webauthn/register`

Verify a registration ceremony and store the passkey it produced.

## Request body

- RegisterPasskeyRequest — A completed registration ceremony, with the label to file it under.
  - `credential` object, required — The browser's PublicKeyCredential, serialized.
  - `name` string, nullable — What to call this passkey in the credential list. Optional: an unnamed one is numbered rather than refused, so a browser that offers no prompt still works.

## Response `201`

Successful Response

- WebAuthnCredentialPublic — A passkey as the settings page lists it. Carries no key material. ``credential_id`` is here because the browser needs it to tell the passkey it just used from the others in the list, and it is a public identifier the authenticator hands to any site that asks: it is what ``allowCredentials`` publishes to an unauthenticated caller during a ceremony.
  - `backed_up` boolean, required
  - `created_at` string, date-time, required
  - `credential_id` string, required
  - `id` string, uuid, required
  - `is_usable` boolean, required
  - `last_used_at` string, date-time, nullable, required
  - `name` string, required
  - `rp_id` string, required
  - `transports` string[], required

## Other responses

- `422` — Validation Error

## Changes

- **2026-08-24** `bd0edfaa8297` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/mozilla-ai/apis/otari/changes/v1/auth/webauthn/register/post.md)

---

[API](https://skmtc.dev/mozilla-ai/apis/otari.md) · [All operations](https://skmtc.dev/mozilla-ai/apis/otari/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/mozilla-ai/otari/revisions/1a5cf829e593/schema)