Skip to main content

Revoke one current-member passkey after a recent sign-in

DELETE 

/api/v1/auth/passkeys/:credential_id

Requires a recent ordinary session and an exact same-origin proof for cookie requests. Revocation is audited, revokes sessions issued by that credential, and cannot remove the last interactive credential; an Owner recovery path, local password, another passkey, or linked external identity must remain.

Request​

Responses​

Passkey revoked

Response Headers
    X-Request-Id

    Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.