> ## Documentation Index > Fetch the complete documentation index at: https://docs.corbado.com/llms.txt > Use this file to discover all available pages before exploring further. # List FIDO MDS authenticator metadata > Returns FIDO Metadata Service (MDS) authenticator entries. Pass a comma-separated list of FIDO2 AAGUIDs to look up specific authenticators (AAGUIDs with no matching entry are omitted from the response), or omit the aaguids parameter to return the full catalog. Use this to display authenticator details (name, icon, transports, certification status) for passkey credentials, e.g. YubiKeys. This is global reference data and is not project-scoped. Required API key permission: `observe:metadata:read`. ## OpenAPI ````yaml /api-reference/openapi/observe.yaml get /observe/metadata/mds openapi: 3.1.1 info: version: 1.0.0 title: Corbado API description: > # Introduction This documentation gives an overview of all Corbado API calls to implement authentication observe. contact: name: Corbado team email: support@corbado.com url: https://www.corbado.com servers: - url: https://api.cloud.corbado.io/v1 security: - bearerAuth: [] tags: - name: ObserveFlow description: Flow search and related APIs x-group: Journeys and users - name: ObserveSubFlow description: Subflow search and related APIs x-group: Journeys and users - name: ObserveUser description: User search and related APIs x-group: Journeys and users - name: ObserveClientEnv description: Client environment search APIs x-group: Journeys and users - name: ObserveTimeSeries description: Time series query APIs x-group: Metrics and funnels - name: ObserveFunnel description: Historical funnel metrics, dictionaries and coverage. x-group: Metrics and funnels - name: ObserveEvent description: Event ingestion and event feed APIs x-group: Events - name: ObserveError description: Named authentication errors and recommendations. x-group: Error management - name: ObserveErrorFlavour description: Error variants and their impact on authentication outcomes. x-group: Error management - name: ObserveAlert description: Authentication alert rules, instances and history. x-group: Alert management - name: ObserveAnnotation description: Annotation APIs (dated notes for analytics context) x-group: Annotations - name: ObserveTableExport description: Table export file listing and download APIs x-group: Data exports - name: ObserveTimeSeriesExport description: Time-series export generation and downloads. x-group: Data exports - name: ObserveDataExport description: Data export APIs x-group: User data - name: ObserveDataDeletionJob description: Data deletion job APIs x-group: User data - name: ObserveFlowTypeDefinition description: Flow type definitions used in authentication journeys. x-group: Catalogs and labels - name: ObserveCatalog description: Catalog APIs x-group: Catalogs and labels - name: OpenAPI description: Downloadable API specification - name: ProjectOperationExecution description: Project-scoped operation history and pipeline health - name: ObserveClassification description: Flow and subflow classification APIs - name: ObserveIntegrationStats description: Integration stats APIs - name: ObserveTimeSeriesPrecalculation description: Time series precalculation APIs - name: ObserveIDList x-group: Saved ID lists description: Stored ID-list selection APIs - name: ObserveDataContext description: Schema-loose data context APIs for agent and debugging tooling - name: ObserveData description: Observe data administration APIs - name: ObserveTrackingStats description: Tracking ingestion stats APIs - name: ObserveExperiment x-group: Experiments description: Experiment catalog and run APIs - name: ObserveDataPolicy description: >- Project data policy catalogue (retention selected by the SDK's meta.dataPolicy code) - name: ObserveMetadata x-group: Metadata description: Authenticator metadata APIs (FIDO MDS + passkey AAGUID) - name: ObservePasskey x-group: Passkey analysis description: Observed passkey search and cohort analysis. paths: /observe/metadata/mds: get: tags: - ObserveMetadata summary: List FIDO MDS authenticator metadata description: >- Returns FIDO Metadata Service (MDS) authenticator entries. Pass a comma-separated list of FIDO2 AAGUIDs to look up specific authenticators (AAGUIDs with no matching entry are omitted from the response), or omit the aaguids parameter to return the full catalog. Use this to display authenticator details (name, icon, transports, certification status) for passkey credentials, e.g. YubiKeys. This is global reference data and is not project-scoped. Required API key permission: `observe:metadata:read`. operationId: ObserveMetadataMdsList parameters: - name: aaguids in: query required: false description: >- Optional comma-separated authenticator AAGUIDs (UUID format) to look up. If omitted, all entries are returned. style: form explode: false schema: type: array items: type: string x-oapi-codegen-extra-tags: validate: omitempty,min=1,max=100,dive,uuid responses: '200': description: FIDO MDS authenticator metadata entries. content: application/json: schema: type: array items: $ref: '#/components/schemas/observeMdsEntry' default: $ref: '#/components/responses/error' security: - bearerAuth: - observe:metadata:read components: schemas: observeMdsEntry: type: object description: A single authenticator entry from a FIDO Metadata Service (MDS) BLOB. required: - identifier - identifierType - name - protocolFamily - latestStatus - metadataStatement - statusReports - blobNo properties: identifier: type: string description: >- Canonical key for this entry (aaguid, aaid, or a u2f cert-key-id derived value). identifierType: type: string description: Which identifier family keys this entry. enum: - aaguid - aaid - u2f aaguid: type: string description: Authenticator AAGUID (present for FIDO2 authenticators). aaid: type: string description: Authenticator AAID (present for FIDO UAF authenticators). certKeyIds: type: array description: >- Attestation certificate key identifiers (present for FIDO U2F authenticators). items: type: string name: type: string description: >- Human-readable authenticator description, e.g. "YubiKey 5 Series with NFC". protocolFamily: type: string description: FIDO protocol family, e.g. fido2, u2f or uaf. latestStatus: type: string description: >- Most recent certification status, e.g. FIDO_CERTIFIED_L1 or NOT_FIDO_CERTIFIED. timeOfLastStatusChange: type: string description: Date of the last certification status change (YYYY-MM-DD). metadataStatement: type: object additionalProperties: true description: >- Full FIDO MDS metadata statement JSON (icons extracted into the icon fields). statusReports: type: array description: Full FIDO MDS certification status report history. items: type: object additionalProperties: true icon: type: string description: Light-mode authenticator icon as a base64 PNG data URI. iconDark: type: string description: Dark-mode authenticator icon as a base64 PNG data URI. blobNo: type: integer description: Sequence number of the source MDS BLOB this entry was imported from. errorRspV2: type: object required: - error properties: error: type: object required: - message properties: message: description: Error message type: string example: Validation failed details: description: Validation error details per field type: array items: type: object required: - field - message properties: field: description: Field name that failed validation type: string example: projectID message: description: Validation error message type: string example: required responses: error: description: Error content: application/json: schema: $ref: '#/components/schemas/errorRspV2' securitySchemes: bearerAuth: type: http scheme: bearer description: >- Use an Observe API key from the management console. The key selects the project and must grant the permission listed on the operation. Keep this key on your server. ````