> ## Documentation Index > Fetch the complete documentation index at: https://docs.corbado.com/llms.txt > Use this file to discover all available pages before exploring further. # Search passkeys > Finds observed passkeys for selected Observe users. Required API key permission: `observe:passkeys:read`. ## OpenAPI ````yaml /api-reference/openapi/observe.yaml post /observe/passkeySearch openapi: 3.1.1 info: version: 1.0.0 title: Corbado API description: > # Introduction This documentation gives an overview of all Corbado API calls to implement authentication observe. contact: name: Corbado team email: support@corbado.com url: https://www.corbado.com servers: - url: https://api.cloud.corbado.io/v1 security: - bearerAuth: [] tags: - name: ObserveFlow description: Flow search and related APIs x-group: Journeys and users - name: ObserveSubFlow description: Subflow search and related APIs x-group: Journeys and users - name: ObserveUser description: User search and related APIs x-group: Journeys and users - name: ObserveClientEnv description: Client environment search APIs x-group: Journeys and users - name: ObserveTimeSeries description: Time series query APIs x-group: Metrics and funnels - name: ObserveFunnel description: Historical funnel metrics, dictionaries and coverage. x-group: Metrics and funnels - name: ObserveEvent description: Event ingestion and event feed APIs x-group: Events - name: ObserveError description: Named authentication errors and recommendations. x-group: Error management - name: ObserveErrorFlavour description: Error variants and their impact on authentication outcomes. x-group: Error management - name: ObserveAlert description: Authentication alert rules, instances and history. x-group: Alert management - name: ObserveAnnotation description: Annotation APIs (dated notes for analytics context) x-group: Annotations - name: ObserveTableExport description: Table export file listing and download APIs x-group: Data exports - name: ObserveTimeSeriesExport description: Time-series export generation and downloads. x-group: Data exports - name: ObserveDataExport description: Data export APIs x-group: User data - name: ObserveDataDeletionJob description: Data deletion job APIs x-group: User data - name: ObserveFlowTypeDefinition description: Flow type definitions used in authentication journeys. x-group: Catalogs and labels - name: ObserveCatalog description: Catalog APIs x-group: Catalogs and labels - name: OpenAPI description: Downloadable API specification - name: ProjectOperationExecution description: Project-scoped operation history and pipeline health - name: ObserveClassification description: Flow and subflow classification APIs - name: ObserveIntegrationStats description: Integration stats APIs - name: ObserveTimeSeriesPrecalculation description: Time series precalculation APIs - name: ObserveIDList x-group: Saved ID lists description: Stored ID-list selection APIs - name: ObserveDataContext description: Schema-loose data context APIs for agent and debugging tooling - name: ObserveData description: Observe data administration APIs - name: ObserveTrackingStats description: Tracking ingestion stats APIs - name: ObserveExperiment x-group: Experiments description: Experiment catalog and run APIs - name: ObserveDataPolicy description: >- Project data policy catalogue (retention selected by the SDK's meta.dataPolicy code) - name: ObserveMetadata x-group: Metadata description: Authenticator metadata APIs (FIDO MDS + passkey AAGUID) - name: ObservePasskey x-group: Passkey analysis description: Observed passkey search and cohort analysis. paths: /observe/passkeySearch: post: tags: - ObservePasskey summary: Search passkeys description: |- Finds observed passkeys for selected Observe users. Required API key permission: `observe:passkeys:read`. operationId: ObservePasskeySearch requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/observePasskeySearchReq' responses: '200': description: Matching passkeys. content: application/json: schema: type: array items: $ref: '#/components/schemas/observePasskey' default: $ref: '#/components/responses/error' security: - bearerAuth: - observe:passkeys:read components: schemas: observePasskeySearchReq: type: object required: - userIDs properties: userIDs: type: array description: User IDs to fetch passkeys for (format `tus-`). items: type: string x-oapi-codegen-extra-tags: validate: required,min=1,max=500,dive,id=tus status: type: array description: Optional passkey statuses to include. items: $ref: '#/components/schemas/observePasskeyStatus' x-oapi-codegen-extra-tags: validate: omitempty,max=2,dive,oneof=created deleted limit: type: integer description: >- Maximum number of passkeys to return. Defaults to 100, maximum 10000. default: 100 minimum: 1 maximum: 10000 x-oapi-codegen-extra-tags: validate: omitempty,min=1,max=10000 observePasskey: type: object required: - id - userID - credentialID - transports - backupState - dataStatus - status - createdMs properties: id: type: string description: Passkey ID (format `tpk-`). userID: type: string description: User ID (format `tus-`). credentialID: type: string description: Base64-encoded credential ID. serialNumber: type: string description: >- YubiKey hardware serial number, when available (pre-registered keys only). type: type: string description: Derived credential type, when classified. enum: - passkey - hardware-security-key - non-discoverable-key - u2f-key discoverable: type: boolean description: >- Whether the credential is discoverable/resident (from credProps.rk at enrollment), when observed. attestationFormat: type: string description: >- Attestation statement format at enrollment (e.g. none, packed, fido-u2f, apple, android-key), when observed. backupEligible: type: boolean description: >- Whether the credential is backup-eligible (BE flag at enrollment), when observed. aaguid: type: string description: AAGUID, when available. aaguidStatus: $ref: '#/components/schemas/observePasskeyAaguidStatus' transports: type: array description: Transport types. items: type: string backupState: type: boolean description: Whether the passkey is backed up. dataStatus: $ref: '#/components/schemas/observePasskeyDataStatus' status: $ref: '#/components/schemas/observePasskeyStatus' createdMs: type: integer format: int64 description: Creation time in milliseconds since epoch. createdOnClientEnvID: type: string description: >- Client environment ID where the passkey was created, when available (format `tce-`). observePasskeyStatus: type: string description: Passkey status. enum: - created - deleted observePasskeyAaguidStatus: type: string description: AAGUID status. enum: - estimate-weak - estimate-strong - estimate-authenticator-provided - confirmed-weak - confirmed-strong - unknown observePasskeyDataStatus: type: string description: Passkey data status. enum: - full-observed - full-patched - partial-login - pre-registered errorRspV2: type: object required: - error properties: error: type: object required: - message properties: message: description: Error message type: string example: Validation failed details: description: Validation error details per field type: array items: type: object required: - field - message properties: field: description: Field name that failed validation type: string example: projectID message: description: Validation error message type: string example: required responses: error: description: Error content: application/json: schema: $ref: '#/components/schemas/errorRspV2' securitySchemes: bearerAuth: type: http scheme: bearer description: >- Use an Observe API key from the management console. The key selects the project and must grant the permission listed on the operation. Keep this key on your server. ````