> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corbado.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List passkey authenticator (AAGUID) metadata

> Returns passkey/platform-authenticator metadata (name + light/dark icons) from the community passkey-authenticator-aaguids catalog. Pass a comma-separated list of AAGUIDs to look up specific authenticators (AAGUIDs with no matching entry are omitted from the response), or omit the aaguids parameter to return the full catalog. Use this to display authenticator details for platform passkeys, e.g. iCloud Keychain or Google Password Manager. This is global reference data and is not project-scoped.

Required API key permission: `observe:metadata:read`.



## OpenAPI

````yaml /api-reference/openapi/observe.yaml get /observe/metadata/passkey-aaguid
openapi: 3.1.1
info:
  version: 1.0.0
  title: Corbado API
  description: >
    # Introduction

    This documentation gives an overview of all Corbado API calls to implement
    authentication observe.
  contact:
    name: Corbado team
    email: support@corbado.com
    url: https://www.corbado.com
servers:
  - url: https://api.cloud.corbado.io/v1
security:
  - bearerAuth: []
tags:
  - name: ObserveFlow
    description: Flow search and related APIs
    x-group: Journeys and users
  - name: ObserveSubFlow
    description: Subflow search and related APIs
    x-group: Journeys and users
  - name: ObserveUser
    description: User search and related APIs
    x-group: Journeys and users
  - name: ObserveClientEnv
    description: Client environment search APIs
    x-group: Journeys and users
  - name: ObserveTimeSeries
    description: Time series query APIs
    x-group: Metrics and funnels
  - name: ObserveFunnel
    description: Historical funnel metrics, dictionaries and coverage.
    x-group: Metrics and funnels
  - name: ObserveEvent
    description: Event ingestion and event feed APIs
    x-group: Events
  - name: ObserveError
    description: Named authentication errors and recommendations.
    x-group: Error management
  - name: ObserveErrorFlavour
    description: Error variants and their impact on authentication outcomes.
    x-group: Error management
  - name: ObserveAlert
    description: Authentication alert rules, instances and history.
    x-group: Alert management
  - name: ObserveAnnotation
    description: Annotation APIs (dated notes for analytics context)
    x-group: Annotations
  - name: ObserveTableExport
    description: Table export file listing and download APIs
    x-group: Data exports
  - name: ObserveTimeSeriesExport
    description: Time-series export generation and downloads.
    x-group: Data exports
  - name: ObserveDataExport
    description: Data export APIs
    x-group: User data
  - name: ObserveDataDeletionJob
    description: Data deletion job APIs
    x-group: User data
  - name: ObserveFlowTypeDefinition
    description: Flow type definitions used in authentication journeys.
    x-group: Catalogs and labels
  - name: ObserveCatalog
    description: Catalog APIs
    x-group: Catalogs and labels
  - name: OpenAPI
    description: Downloadable API specification
  - name: ProjectOperationExecution
    description: Project-scoped operation history and pipeline health
  - name: ObserveClassification
    description: Flow and subflow classification APIs
  - name: ObserveIntegrationStats
    description: Integration stats APIs
  - name: ObserveTimeSeriesPrecalculation
    description: Time series precalculation APIs
  - name: ObserveIDList
    x-group: Saved ID lists
    description: Stored ID-list selection APIs
  - name: ObserveDataContext
    description: Schema-loose data context APIs for agent and debugging tooling
  - name: ObserveData
    description: Observe data administration APIs
  - name: ObserveTrackingStats
    description: Tracking ingestion stats APIs
  - name: ObserveExperiment
    x-group: Experiments
    description: Experiment catalog and run APIs
  - name: ObserveDataPolicy
    description: >-
      Project data policy catalogue (retention selected by the SDK's
      meta.dataPolicy code)
  - name: ObserveMetadata
    x-group: Metadata
    description: Authenticator metadata APIs (FIDO MDS + passkey AAGUID)
  - name: ObservePasskey
    x-group: Passkey analysis
    description: Observed passkey search and cohort analysis.
paths:
  /observe/metadata/passkey-aaguid:
    get:
      tags:
        - ObserveMetadata
      summary: List passkey authenticator (AAGUID) metadata
      description: >-
        Returns passkey/platform-authenticator metadata (name + light/dark
        icons) from the community passkey-authenticator-aaguids catalog. Pass a
        comma-separated list of AAGUIDs to look up specific authenticators
        (AAGUIDs with no matching entry are omitted from the response), or omit
        the aaguids parameter to return the full catalog. Use this to display
        authenticator details for platform passkeys, e.g. iCloud Keychain or
        Google Password Manager. This is global reference data and is not
        project-scoped.


        Required API key permission: `observe:metadata:read`.
      operationId: ObserveMetadataPasskeyAaguidList
      parameters:
        - name: aaguids
          in: query
          required: false
          description: >-
            Optional comma-separated authenticator AAGUIDs (UUID format) to look
            up. If omitted, all entries are returned.
          style: form
          explode: false
          schema:
            type: array
            items:
              type: string
          x-oapi-codegen-extra-tags:
            validate: omitempty,min=1,max=100,dive,uuid
      responses:
        '200':
          description: Passkey authenticator (AAGUID) metadata entries.
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/observePasskeyAaguid'
        default:
          $ref: '#/components/responses/error'
      security:
        - bearerAuth:
            - observe:metadata:read
components:
  schemas:
    observePasskeyAaguid:
      type: object
      description: >-
        A single passkey/platform-authenticator entry from the community
        passkey-authenticator-aaguids catalog, keyed by AAGUID.
      required:
        - aaguid
        - name
        - passwordManager
      properties:
        aaguid:
          type: string
          description: Authenticator AAGUID (UUID format).
        name:
          type: string
          description: Human-readable authenticator name, e.g. "Apple iCloud Keychain".
        iconLight:
          type: string
          description: Light-mode authenticator icon as an SVG data URI.
        iconDark:
          type: string
          description: Dark-mode authenticator icon as an SVG data URI.
        passwordManager:
          type: boolean
          description: >-
            Whether this authenticator is a password manager (curated by
            Corbado).
    errorRspV2:
      type: object
      required:
        - error
      properties:
        error:
          type: object
          required:
            - message
          properties:
            message:
              description: Error message
              type: string
              example: Validation failed
            details:
              description: Validation error details per field
              type: array
              items:
                type: object
                required:
                  - field
                  - message
                properties:
                  field:
                    description: Field name that failed validation
                    type: string
                    example: projectID
                  message:
                    description: Validation error message
                    type: string
                    example: required
  responses:
    error:
      description: Error
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/errorRspV2'
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: >-
        Use an Observe API key from the management console. The key selects the
        project and must grant the permission listed on the operation. Keep this
        key on your server.

````