Skip to main content
POST
List passkey behaviour for a user cohort

Authorizations

Authorization
string
header
required

Use an Observe API key from the management console. The key selects the project and must grant the permission listed on the operation. Keep this key on your server.

Body

application/json
fromMs
integer<int64>
required

Cohort lower bound — users created at or after this epoch-ms timestamp

toMs
integer<int64>
required

Cohort upper bound — users created strictly before this epoch-ms timestamp

maxGroupSize
integer
required

Maximum number of users to return (newest first)

authenticatorClass
enum<string>

Optional credential-class filter, applied after the user limit. Returns matching holders and credentials from the capped user cohort; matching holders outside that cohort are omitted. Activity includes only subflows linked to those credentials; unlinked attempts and enrollment-flow summaries are excluded. Omit for the existing all-credentials user cohort.

Available options:
security-key,
synced-passkey,
device-bound-passkey,
unknown

Response

Per-user passkey behaviour list for the cohort

userID
string
required
createdMs
integer<int64>
required
passkeys
object[]
required
passkeyLogin
object
required
passkeyEnrollment
object
required
passkeyEnrollmentFlow
object
required
externalID
string