---
title: "Register a new Passkey MFA device"
method: GET
path: "/sdk/{environmentId}/users/mfa/register/passkey"
tags: ["SDK"]
---

# Register a new Passkey MFA device

`GET /sdk/{environmentId}/users/mfa/register/passkey`

## Path parameters

- `environmentId` string, required

## Response `200`

successful operation

- MFARegisterPasskeyDeviceGetResponse
  - `id` string, required
  - `type` 'totp' | 'passkey' | 'email', required
  - `registration` object, required
    - `attestation` 'direct' | 'enterprise' | 'indirect' | 'none'
    - `rp` PublicKeyCredentialRpEntity, required
      - `id` string
      - `name` string, required
    - `user` PublicKeyCredentialUserEntity, required
      - `id` string, required
      - `name` string, required
      - `displayName` string, required
    - `challenge` string, required
    - `pubKeyCredParams` PublicKeyCredentialParameters[], required
      - `alg` number, required
      - `type` 'public-key', required
    - `timeout` number
    - `authenticatorSelection` AuthenticatorSelectionCriteria
      - `authenticatorAttachment` 'cross-platform' | 'platform'
      - `requireResidentKey` boolean
      - `residentKey` 'discouraged' | 'preferred' | 'required'
      - `userVerification` 'discouraged' | 'preferred' | 'required'
    - `excludeCredentials` PublicKeyCredentialDescriptor[]
      - `id` string, required
      - `type` 'public-key', required
    - `extensions` AuthenticationExtensionsClientInputs
      - `appid` string
      - `credProps` boolean
      - `hmacCreateSecret` boolean

## Other responses

- `401` — Unauthorized
- `422` — Unprocessable Entity
- `500` — Internal Server Error

---

[API](https://skmtc.net/dynamic/apis/dashboard-api.md) · [All operations](https://skmtc.net/dynamic/apis/dashboard-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/dynamic/dashboard-api/versions/aac826315d90/schema)