Skip to main content
POST
/
auth
/
passkey
/
enroll
Begin passkey enrollment — return WebAuthn creation options
curl --request POST \
  --url https://api.mnemom.ai/v1/auth/passkey/enroll \
  --cookie mnemom_session=
{
  "rp": {},
  "user": {},
  "challenge": "<string>",
  "pubKeyCredParams": "<array>",
  "authenticatorSelection": {},
  "attestation": "<string>",
  "excludeCredentials": "<array>",
  "timeout": 123
}

Authorizations

​
mnemom_session
string
cookie
required

HttpOnly, Secure, SameSite=Lax cookie issued by /v1/auth/sign-in (or the SSO / email-callback flows). The value is an AES-256-GCM-encrypted blob of {access_token, refresh_token, issued_at, auth_method}. Browser clients include this automatically with credentials: "include".

Response

WebAuthn creation options. Shape follows the WebAuthn Level 3 spec.

WebAuthn registration options (base64url-encoded per the WebAuthn Level 3 JSON serialization).

​
rp
object
​
user
object
​
challenge
string
​
pubKeyCredParams
array
​
authenticatorSelection
object
​
attestation
string
​
excludeCredentials
array
​
timeout
integer