> ## Documentation Index > Fetch the complete documentation index at: https://docs.corbado.com/llms.txt > Use this file to discover all available pages before exploring further. # List authenticator metadata > Returns metadata of passkey authenticators by AAGUID: name, light and dark icon, whether it is a passkey provider or a security key, its password manager type and, for FIDO-registered authenticators, the FIDO certification status and FIDO Metadata Service (MDS) details. Covers platform authenticators and password managers (e.g. iCloud Keychain, Google Password Manager, 1Password) as well as security keys (e.g. YubiKeys). Pass a comma-separated list of up to 100 AAGUIDs to look up specific authenticators; AAGUIDs without an entry are omitted from the response. Omit the `aaguids` parameter to get all entries. This is global reference data and is not project-scoped. Required API key permission: `observe:metadata:read`. ## OpenAPI ````yaml /api-reference/openapi/observe.yaml get /observe/metadata/authenticators openapi: 3.1.1 info: version: 1.0.0 title: Corbado API description: > # Introduction This documentation gives an overview of all Corbado API calls to implement authentication observe. contact: name: Corbado team email: support@corbado.com url: https://www.corbado.com servers: - url: https://api.cloud.corbado.io/v1 security: - bearerAuth: [] tags: - name: ObserveFlow description: Flow search and related APIs x-group: Journeys and users - name: ObserveSubFlow description: Subflow search and related APIs x-group: Journeys and users - name: ObserveUser description: User search and related APIs x-group: Journeys and users - name: ObserveIdentifier description: Identifier search over submitted identifiers x-group: Journeys and users - name: ObservePasskeyIntelligence description: Passkey login predictions and support diagnosis x-group: Passkey Intelligence - name: ObserveClientEnv description: Client environment search APIs x-group: Journeys and users - name: ObserveTimeSeries description: Time series query APIs x-group: Metrics and funnels - name: ObserveFunnel description: Historical funnel metrics, dictionaries and coverage. x-group: Metrics and funnels - name: ObserveEvent description: Event ingestion and event feed APIs x-group: Events - name: ObserveError description: Named authentication errors and recommendations. x-group: Error management - name: ObserveErrorFlavour description: Error variants and their impact on authentication outcomes. x-group: Error management - name: ObserveErrorCode description: The Observe error dictionary (Corbado internal) - name: ObserveFinding description: Curated findings that explain errors, their impact and who has to act. x-group: Error management - name: ObserveAlert description: Authentication alert rules, instances and history. x-group: Alert management - name: ObserveAnnotation description: >- Annotations, the project's memory (what is true about the data and how to read it) x-group: Annotations - name: ObserveTableExport description: Table export file listing and download APIs x-group: Data exports - name: ObserveTimeSeriesExport description: Time-series export generation and downloads. x-group: Data exports - name: ObserveDataExport description: Data export APIs x-group: User data - name: ObserveDataDeletionJob description: Data deletion job APIs x-group: User data - name: ObserveFlowTypeDefinition description: Flow type definitions used in authentication journeys. x-group: Catalogs and labels - name: ObserveCatalog description: Catalog APIs x-group: Catalogs and labels - name: ObserveSavedFilter description: >- Saved filters, named flow filters a project stores once and applies by reference x-group: Saved filters - name: OpenAPI description: Downloadable API specification - name: ProjectOperationExecution description: Project-scoped operation history and pipeline health - name: ObserveClassification description: Flow and subflow classification APIs - name: ObserveIntegrationStats description: Integration stats APIs - name: ObserveTimeSeriesPrecalculation description: Time series precalculation APIs - name: ObserveIDList x-group: Saved ID lists description: Stored ID-list selection APIs - name: ObserveDataContext description: Schema-loose data context APIs for agent and debugging tooling - name: ObserveData description: Observe data administration APIs - name: ObserveTrackingStats description: Tracking ingestion stats APIs - name: ObserveProbe description: Raw probe capture items (internal autocapture diagnostics) - name: ObserveTelemetry description: Raw SDK/integration diagnostic telemetry - name: ObserveExperiment x-group: Experiments description: Experiment catalog and run APIs - name: ObserveDataPolicy description: >- Project data policy catalogue (retention selected by the SDK's meta.dataPolicy code) - name: ObserveMetadata x-group: Metadata description: Authenticator metadata APIs (FIDO MDS + passkey AAGUID) - name: ObserveSri description: Subresource Integrity hashes of the scripts Corbado hosts for a project - name: ObserveAutocapture description: >- Autocapture builds, candidates and releases, registered by Corbado's delivery pipeline - name: ObserveNotification description: >- Who is notified about what happens in a project, e.g. autocapture releases, and how it was delivered - name: ObservePasskey x-group: Passkey analysis description: Observed passkey search and cohort analysis. paths: /observe/metadata/authenticators: get: tags: - ObserveMetadata summary: List authenticator metadata description: >- Returns metadata of passkey authenticators by AAGUID: name, light and dark icon, whether it is a passkey provider or a security key, its password manager type and, for FIDO-registered authenticators, the FIDO certification status and FIDO Metadata Service (MDS) details. Covers platform authenticators and password managers (e.g. iCloud Keychain, Google Password Manager, 1Password) as well as security keys (e.g. YubiKeys). Pass a comma-separated list of up to 100 AAGUIDs to look up specific authenticators; AAGUIDs without an entry are omitted from the response. Omit the `aaguids` parameter to get all entries. This is global reference data and is not project-scoped. Required API key permission: `observe:metadata:read`. operationId: ObserveMetadataAuthenticatorList parameters: - name: aaguids in: query required: false description: >- Optional comma-separated authenticator AAGUIDs (UUID format) to look up. If omitted, all entries are returned. style: form explode: false schema: type: array items: type: string x-oapi-codegen-extra-tags: validate: omitempty,min=1,max=100,dive,uuid responses: '200': description: Authenticator metadata entries. content: application/json: schema: type: array items: $ref: '#/components/schemas/observeAuthenticator' default: $ref: '#/components/responses/error' security: - bearerAuth: - observe:metadata:read components: schemas: observeAuthenticator: type: object description: Metadata of one authenticator, keyed by AAGUID. required: - aaguid - name - category - passwordManagerType properties: aaguid: type: string description: Authenticator AAGUID (UUID format, lower case). name: type: string description: >- Human-readable authenticator name, e.g. "Apple iCloud Keychain" or "YubiKey 5 Series with NFC". iconLight: type: - string - 'null' description: Icon for light backgrounds as a PNG data URI (256 × 256 px). iconDark: type: - string - 'null' description: Icon for dark backgrounds as a PNG data URI (256 × 256 px). category: type: string description: >- `passkey_provider` for platform authenticators and password managers, `security_key` for roaming hardware keys. enum: - passkey_provider - security_key passwordManagerType: type: string description: >- `first_party` for the password manager of a platform (e.g. Apple Passwords, Google Password Manager), `third_party` for independent password managers (e.g. 1Password), `none` otherwise. enum: - none - first_party - third_party fidoStatus: type: - string - 'null' description: >- Latest FIDO certification status, e.g. FIDO_CERTIFIED_L1 or NOT_FIDO_CERTIFIED. Null when the authenticator is not in FIDO MDS. mds: oneOf: - $ref: '#/components/schemas/observeAuthenticatorMds' - type: 'null' description: >- The authenticator's FIDO Metadata Service entry. Null when the authenticator is not in FIDO MDS. observeAuthenticatorMds: type: object description: FIDO Metadata Service (MDS) entry of an authenticator. required: - metadataStatement - statusReports properties: metadataStatement: type: object additionalProperties: true description: FIDO MDS metadata statement (without its icon). statusReports: type: array description: FIDO MDS certification status report history. items: type: object additionalProperties: true timeOfLastStatusChange: type: - string - 'null' description: Date of the last certification status change (YYYY-MM-DD). errorRspV2: type: object required: - error properties: error: type: object required: - message properties: message: description: Error message type: string example: Validation failed details: description: Validation error details per field type: array items: type: object required: - field - message properties: field: description: Field name that failed validation type: string example: projectID message: description: Validation error message type: string example: required responses: error: description: Error content: application/json: schema: $ref: '#/components/schemas/errorRspV2' securitySchemes: bearerAuth: type: http scheme: bearer description: >- Use an Observe API key from the management console. The key selects the project and must grant the permission listed on the operation. Keep this key on your server. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.