---
title: "Save your verified passkey"
method: POST
path: "/identity/passkey_registrations/{challenge}/confirmation"
tags: ["identity", "customer-session"]
---

# Save your verified passkey

`POST /identity/passkey_registrations/{challenge}/confirmation`

## Request

- Base URL: `https://api.stablesea.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.stablesea.com/identity/passkey_registrations/{challenge}/confirmation`
- Auth: none declared

## Path parameters

- `challenge` string, required

## Request body

- PasskeysRegistrationFinishInput
  - `browser_error` 'invalid_state' | 'not_allowed'
  - `credential_response` unknown

## Response `200`

OK

- PasskeysPasskeyView
  - `backup_eligible` boolean, required
  - `created_ts` string, date-time, required
  - `id` string, required
  - `last_used_ts` string, date-time, nullable, required
  - `name` string, required
  - `provider` string, required
  - `synced` boolean, required

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `429`: Too Many Requests
- `default`: Error response.

## Changes

- **2026-10-31** `0821cbc9cb21`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/stablesea/apis/stable-sea-backend/changes/identity/passkey_registrations/:challenge/confirmation/post.md)

---

[API](https://skmtc.dev/stablesea/apis/stable-sea-backend.md) - [All operations](https://skmtc.dev/stablesea/apis/stable-sea-backend/llms.txt) - [OpenAPI document](https://skmtc.dev/stablesea/apis/stable-sea-backend/revisions/772c80d83658?raw)