---
title: "Remove Passkey"
method: DELETE
path: "/v1/auth/passkeys/{passkey_id}"
tags: ["Auth: Passkeys"]
---

# Remove Passkey

`DELETE /v1/auth/passkeys/{passkey_id}`

## Request

- Base URL: `https://api.robosystems.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.robosystems.ai/v1/auth/passkeys/{passkey_id}`
- Auth: none declared

Remove one passkey after re-authentication (password or fresh assertion). The last passkey of an MFA-required role cannot be removed while enforcement is active.

## Path parameters

- `passkey_id` string, required

## Request body

- PasskeyDeleteRequest: Re-authentication proof for removing a passkey.
  - `password` string, nullable: Current password (password-holding users)
  - `assertion` object, nullable: Fresh WebAuthn assertion from the re-auth ceremony

## Response `200`

Successful Response

- SuccessResponse: Standard success response for operations without specific return data.
  - `success` boolean: Indicates the operation completed successfully
  - `message` string, required: Human-readable success message
  - `data` object, nullable: Optional additional data related to the operation

## Other responses

- `400`: Invalid request
- `401`: Re-authentication failed
- `409`: Last passkey of an MFA-required role
- `422`: Validation Error
- `429`: Rate limit exceeded
- `500`: Internal server error

---

[API](https://skmtc.dev/robosystems/apis/robosystems-api.md) · [All operations](https://skmtc.dev/robosystems/apis/robosystems-api/llms.txt) · [OpenAPI document](https://skmtc.dev/robosystems/apis/robosystems-api/revisions/e661e2d5ca6a?raw)