Skip to main content
GET
List authenticator metadata

Authorizations

Authorization
string
header
required

Use an Observe API key from the management console. The key selects the project and must grant the permission listed on the operation. Keep this key on your server.

Scopes

observe:metadata:read

Query Parameters

aaguids
string[]

Optional comma-separated authenticator AAGUIDs (UUID format) to look up. If omitted, all entries are returned.

Response

Authenticator metadata entries.

aaguid
string
required

Authenticator AAGUID (UUID format, lower case).

name
string
required

Human-readable authenticator name, e.g. "Apple iCloud Keychain" or "YubiKey 5 Series with NFC".

category
enum<string>
required

passkey_provider for platform authenticators and password managers, security_key for roaming hardware keys.

Available options:
passkey_provider,
security_key
passwordManagerType
enum<string>
required

first_party for the password manager of a platform (e.g. Apple Passwords, Google Password Manager), third_party for independent password managers (e.g. 1Password), none otherwise.

Available options:
none,
first_party,
third_party
iconLight
string | null

Icon for light backgrounds as a PNG data URI (256 × 256 px).

iconDark
string | null

Icon for dark backgrounds as a PNG data URI (256 × 256 px).

fidoStatus
string | null

Latest FIDO certification status, e.g. FIDO_CERTIFIED_L1 or NOT_FIDO_CERTIFIED. Null when the authenticator is not in FIDO MDS.

mds
object | null

The authenticator's FIDO Metadata Service entry. Null when the authenticator is not in FIDO MDS.