Skip to main content
POST
Begin passkey enrollment — return WebAuthn creation options

Authorizations

mnemom_session
string
cookie
required

HttpOnly, Secure, SameSite=Lax cookie issued by /v1/auth/sign-in (or the SSO / email-callback flows). The value is an AES-256-GCM-encrypted blob of {access_token, refresh_token, issued_at, auth_method}. Browser clients include this automatically with credentials: "include".

Response

WebAuthn creation options. Shape follows the WebAuthn Level 3 spec.

WebAuthn registration options (base64url-encoded per the WebAuthn Level 3 JSON serialization).

rp
object
user
object
challenge
string
pubKeyCredParams
array
authenticatorSelection
object
attestation
string
excludeCredentials
array
timeout
integer