---
title: "WebAuthn login options for an email's passkeys"
method: POST
path: "/agent/v1/control-plane/session/passkey/options"
tags: ["ControlPlane"]
---

# WebAuthn login options for an email's passkeys

`POST /agent/v1/control-plane/session/passkey/options`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/agent/v1/control-plane/session/passkey/options`
- Auth: none declared

## Request body

- object
  - `email` string, email, required
  - `purpose` string: Optional ceremony purpose. `gitvault.viewer.key_bridge` scopes allowCredentials to the principal's wrapper-backed credentials when any exist (vault-recovery-custody single-tap bridge); unrecognized values are ignored.

## Response `200`

WebAuthn authentication options

- object

## Other responses

- `404`: No passkey enrolled for this email

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)