Skip to main content
GET
/
sdk
/
{environmentId}
/
users
/
passkeys
/
register
Get user passkeys
curl --request GET \
  --url https://app.dynamicauth.com/api/v0/sdk/{environmentId}/users/passkeys/register \
  --header 'Authorization: Bearer <token>'
{
  "authenticatorSelection": {
    "requireResidentKey": true
  },
  "challenge": "<string>",
  "excludeCredentials": [
    {
      "id": "<string>",
      "type": "public-key",
      "transports": []
    }
  ],
  "pubKeyCredParams": [
    {
      "alg": 123,
      "type": "public-key"
    }
  ],
  "rp": {
    "id": "<string>",
    "name": "<string>"
  },
  "timeout": 123,
  "user": {
    "displayName": "<string>",
    "id": "<string>",
    "name": "<string>"
  },
  "extensions": {
    "appid": "<string>",
    "appidExclude": "<string>",
    "credProps": true,
    "uvm": true
  },
  "hints": [
    "<string>"
  ]
}

Authorizations

​
Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

​
environmentId
string
required

ID of the environment

Required string length: 36
Pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
Example:

"95b11417-f18f-457f-8804-68e361f9164f"

Response

returns passkey registration options

​
attestation
enum<string>
required
Available options:
direct,
enterprise,
indirect,
none
​
authenticatorSelection
object
required
​
challenge
string
required

Base64URL encoded challenge

​
excludeCredentials
object[]
required

List of credentials to exclude from registration

​
pubKeyCredParams
object[]
required

List of acceptable public key credential parameters

​
rp
object
required
​
timeout
number
required

Timeout in milliseconds

​
user
object
required
​
extensions
object
​
hints
string[]

Optional hints for the authenticator

Last modified on July 2, 2026