---
title: "Start passkey MFA verification"
method: POST
path: "/v1/users/{user_id}/mfa/passkey/verification/init"
tags: ["Users MFA"]
---

# Start passkey MFA verification

`POST /v1/users/{user_id}/mfa/passkey/verification/init`

## Request

- Base URL: `https://api.privy.io`
- URL: `https://api.privy.io/v1/users/{user_id}/mfa/passkey/verification/init`
- Auth: HTTP basic

Returns WebAuthn authentication options for the enrolled MFA passkeys.

## Path parameters

- `user_id` string, required

## Headers

- `privy-app-id` string, required: ID of your Privy app.
- `privy-user-token` string, required: Access token or custom authentication JWT for the user the request acts on.

## Request body

- PasskeyMfaInitRequestBody: Starts a passkey MFA ceremony for the specified relying party origin.
  - `relying_party` string, uri, required: Origin where the authenticator runs, such as https://app.example.com.

## Response `200`

WebAuthn authentication options.

- PasskeyMfaVerificationInitResponse: WebAuthn authentication options for the started passkey MFA verification.
  - `options` MfaPasskeyAuthenticatorVerifyOptions, required: WebAuthn authentication options as defined by the Web Authentication specification.
    - `challenge` string, required
    - `timeout` number
    - `rp_id` string
    - `allow_credentials` MfaPasskeyCredentialDescriptor[]
      - `id` string, required
      - `type` string, required
      - `transports` string[]
    - `user_verification` string
    - `extensions` MfaPasskeyVerifyExtensions: Extensions for a WebAuthn authentication ceremony.
      - `app_id` string
      - `cred_props` boolean
      - `hmac_create_secret` boolean

## Changes

- **2026-10-28** `6a80d4be53a8`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/privy-io/apis/privy-api/changes/v1/users/:user_id/mfa/passkey/verification/init/post.md)

---

[API](https://skmtc.dev/privy-io/apis/privy-api.md) - [All operations](https://skmtc.dev/privy-io/apis/privy-api/llms.txt) - [OpenAPI document](https://skmtc.dev/privy-io/apis/privy-api/revisions/6a80d4be53a8?raw)