POST
/
v2
/
connect
/
manage
/
list
List connect passkeys
curl --request POST \
  --url https://{projectId}.frontendapi.corbado.io/v2/connect/manage/list \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "connectToken": "<string>"
}'
{
  "passkeys": [
    {
      "id": "cre-12345",
      "credentialID": "<string>",
      "attestationType": "<string>",
      "transport": [
        "usb"
      ],
      "backupEligible": true,
      "backupState": true,
      "authenticatorAAGUID": "<string>",
      "sourceOS": "<string>",
      "sourceBrowser": "<string>",
      "lastUsed": "<string>",
      "created": "<string>",
      "status": "pending",
      "aaguidDetails": {
        "name": "<string>",
        "iconLight": "<string>",
        "iconDark": "<string>"
      },
      "createdMs": 123,
      "lastUsedMs": 123,
      "tags": [
        "<string>"
      ]
    }
  ],
  "rpID": "<string>",
  "userID": "<string>"
}

Authorizations

Authorization
string
header
required

After a user logs in successfully, a session is created and a JWT token is returned. This token represents the user's authenticated session. It must be included in the Authorization header as a Bearer token for all protected endpoints:

Authorization: Bearer <your-token>

The server will validate this token to authorize access.

Body

application/json

Response

200 - application/json

Contains all passkeys for a user.

The response is of type object.