Bind passkey for sign-in

Add MCP server to your AI tool

Allow AI tools and LLMs to interact with the API documentation portal through MCP.

MCP server URL

https://openapi.logto.io/mcp

Standard setup for AI tools providing an mcp.json file

mcp.json 
{
  "Logto API references MCP server": {
    "url": "https://openapi.logto.io/mcp"
  }
}
Close
POST /api/experience/profile/mfa/passkey

Bind a WebAuthn credential as a passkey for sign-in purposes. Unlike POST /api/experience/profile/mfa with type: WebAuthn, this endpoint is exclusively for adding a passkey as a sign-in method and does NOT mark the user's optional MFA as enabled.

application/json

Body Required

  • verificationId string Required

    The ID of the WebAuthn verification record to bind as a passkey.

Responses

  • 204

    The passkey has been successfully bound to the user profile.

  • 400

    Invalid request.
    - session.verification_failed: The WebAuthn verification record is invalid or not verified.
    - session.mfa.pending_info_not_found: The verification record does not have the required registration data.

  • 403

    Forbidden.
    - session.mfa.require_mfa_verification: The sign-in has existing MFA factors and must verify one before binding a new factor.

  • 404

    Entity not found.
    - session.identifier_not_found: The user has not been identified yet.
    - session.verification_session_not_found: The WebAuthn verification record is not found.

POST /api/experience/profile/mfa/passkey 
curl \
 --request POST 'https://[tenant_id].logto.app/api/experience/profile/mfa/passkey' \
 --header "Content-Type: application/json" \
 --data '{
  "verificationId": "string"
}'
Request examples 
{
  "verificationId": "string"
}