---
title: "Verify adding of a new webauthn security key"
method: POST
path: "/user/webauthn/verify"
tags: ["security"]
---

# Verify adding of a new webauthn security key

`POST /user/webauthn/verify`

Complete the process of adding a new WebAuthn security key by verifying the authenticator response. Requires elevated permissions.

## Request body

- VerifyAddSecurityKeyRequest
  - `credential` CredentialCreationResponse, required
    - `id` string, required — The credential's identifier
    - `type` string, required — The credential type represented by this object
    - `rawId` string, byte, required — Base64url-encoded binary data
    - `clientExtensionResults` AuthenticationExtensionsClientOutputs — Map of extension outputs from the client
      - `appid` boolean — Application identifier extension output
      - `credProps` CredentialPropertiesOutput — Credential properties extension output
        - `rk` boolean — Indicates if the credential is a resident key
      - `hmacCreateSecret` boolean — HMAC secret extension output
    - `authenticatorAttachment` string — The authenticator attachment
    - `response` AuthenticatorAttestationResponse, required
      - `clientDataJSON` string, byte, required — Base64url-encoded binary data
      - `transports` string[] — The authenticator transports
      - `authenticatorData` string, byte — Base64url-encoded binary data
      - `publicKey` string, byte — Base64url-encoded binary data
      - `publicKeyAlgorithm` integer — The public key algorithm identifier
      - `attestationObject` string, byte, required — Base64url-encoded binary data
  - `nickname` string — Optional nickname for the security key

## Response `200`

Security key successfully added

- VerifyAddSecurityKeyResponse
  - `id` string, required — The ID of the newly added security key
  - `nickname` string — The nickname of the security key if provided

## Other responses

- `default` — An error occurred while processing the request

---

[API](https://skmtc.net/nhost/apis/nhost-authentication-api.md) · [All operations](https://skmtc.net/nhost/apis/nhost-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/nhost/nhost-authentication-api/revisions/a5c0d88b55c4/schema)