---
title: "Get a list of all WebAuthn credentials for a user"
method: GET
path: "/users/{id}/webauthn_credentials"
---

# Get a list of all WebAuthn credentials for a user

`GET /users/{id}/webauthn_credentials`

## Path parameters

- `id` string, uuid, required

## Response `200`

OK

- WebAuthnCredential[]
  - `id` string, uuid4, required
  - `name` string — A name that the user choose
  - `public_key` string, required — The public key of the credential
  - `attestation_type` string, required — The attestation type the credential was registered with
  - `aaguid` string, required — The AAGUID of the authenticator the credentials was created on
  - `transports` string[] — The ways the authenticator is connected
  - `created_at` string, date-time, required — Time of creation of the credential
  - `last_used_at` string, date-time — The time when the credential was last used
  - `backup_eligible` boolean, required — Indicates if the credential can be backed up
  - `backup_state` boolean, required — Indicates if the credential is backed up
  - `mfa_only` boolean, required — Indicates if the credential can only be used as a MFA credential

## Other responses

- `400` — Bad Request
- `404` — Not Found
- `500` — Internal server error

---

[API](https://skmtc.net/hanko/apis/hanko-admin-api.md) · [All operations](https://skmtc.net/hanko/apis/hanko-admin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/hanko/hanko-admin-api/versions/d22a127b0978/schema)