---
title: "Begin adding a passkey"
method: POST
path: "/api/account/passkeys/register/start"
tags: ["Account"]
---

# Begin adding a passkey

`POST /api/account/passkeys/register/start`

## Request

- Base URL: `https://slimlytics.com`
- URL: `https://slimlytics.com/api/account/passkeys/register/start`
- Auth: HTTP bearer

## Request body

- Reauthentication
  - `currentPassword` string: Required to add the first passkey. Adding more needs a session that verified a passkey within the last 12 hours.

## Response `200`

WebAuthn creation options

- WebAuthnChallenge
  - `challengeId` string, uuid, required: Single-use ceremony ID; expires after 5 minutes
  - `options` object, required: WebAuthn `publicKey` creation or request options (binary fields are base64url)

## Other responses

- `400`: Invalid request
- `401`: Authentication required
- `403`: Not allowed for this credential (API tokens, non-admins), or error code `mfa_required` when a session that verified a passkey within 12 hours is needed
- `500`: Internal service error

---

[API](https://skmtc.dev/slimlytics/apis/slimlytics-api.md) · [All operations](https://skmtc.dev/slimlytics/apis/slimlytics-api/llms.txt) · [OpenAPI document](https://skmtc.dev/slimlytics/apis/slimlytics-api/revisions/f9a26641a254?raw)