Skip to Content
SeyloDocs
API referenceSign-in and account

Sign in with a passkey

POST
/api/v1/auth.passkeyLoginFinish

Verifies the passkey assertion and starts a session. A passkey counts as both factors, so 2FA is not asked again.

Needs no sign-in. Not available to MCP clients or the assistant.

Request Body

application/json
  1. body
ticket*string
Length1 <= length <= 200
response*

WebAuthn options or response JSON.

Response Body

Success.

application/json
  1. response
status*string|string
viewer*
challenge?
Example Request
curl -X POST 'https://example.com/api/v1/auth.passkeyLoginFinish' \  -H 'Content-Type: application/json' \  -d '{  "ticket": "string",  "response": {}}'
Example Response
{  "status": "signedIn",  "viewer": {    "id": "string",    "email": "[email protected]",    "name": "string",    "role": "owner"  },  "challenge": {    "ticket": "string",    "methods": [      "totp"    ],    "expiresAt": "2019-08-24T14:15:22Z"  }}

Start signing in with a passkey POST

Returns WebAuthn request options for navigator.credentials.get (discoverable credentials, no email needed) and a ticket. Needs no sign-in. Not available to MCP clients or the assistant.

Start adding a passkey POST

Returns WebAuthn creation options for navigator.credentials.create and a ticket for auth.passkeyRegisterFinish. Needs a sign-in or auth.reauth from the last 15 minutes (FORBIDDEN details.reason "reauth" otherwise). Any signed-in caller. Not available to MCP clients or the assistant.