---
title: "Hosted WebAuthn login options"
method: POST
path: "/auth/passkeys/login/options"
tags: ["Auth"]
---

# Hosted WebAuthn login options

`POST /auth/passkeys/login/options`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/auth/passkeys/login/options`
- Auth: none declared

Hosted passkey-login ceremony, resolved by request host (no credential). Returns PublicKeyCredentialRequestOptionsJSON for navigator.credentials.get(). An email hint is accepted without exposing allowCredentials (enumeration-resistant).

## Request body

- object
  - `email` string, email

## Response `200`

WebAuthn login options.

- object

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)