---
title: "Complete passkey authentication"
method: POST
path: "/accounts/complete-auth-with-passkey"
tags: ["Authentication", "Multi-Factor Authentication"]
---

# Complete passkey authentication

`POST /accounts/complete-auth-with-passkey`

Completes the WebAuthn passkey authentication flow by verifying the signed challenge.

## Request body

- CompleteAuthWithPasskeyRequest
  - `account` string — Account name
  - `token` string — MFA token
  - `credential` string, required — WebAuthn credential
  - `email` string — User email

## Response `200`

Authentication successful

- object
  - `data` AuthResponse, required
    - `refresh_token` string — Refresh token
    - `auth_token` string — Authentication token
    - `passkey_enabled` boolean — Whether passkey authentication is enabled
    - `totp_enabled` boolean — Whether TOTP authentication is enabled

## Other responses

- `401` — Invalid credential or verification failed

---

[API](https://skmtc.net/quivaworks/apis/quiva-ai-gateway.md) · [All operations](https://skmtc.net/quivaworks/apis/quiva-ai-gateway/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/quivaworks/quiva-ai-gateway/revisions/771d118bd4d1/schema)