DocsAPI ReferenceLogin
Credentials

List signing authorities (passkeys)

Returns the authenticated PID's active passkey authorities for their account. Public fields only — credential ID, last-used; never key material.

GET
/credentials

Returns the authenticated PID's active passkey authorities for their account. Public fields only — credential ID, last-used; never key material.

Authorization

cookieAuth
pid_access<token>

JWT access token set by /auth/google/callback or /auth/refresh

In: cookie

Response Body

application/json

application/json

curl -X GET "https://example.com/credentials"
[  {    "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",    "type": "secp256r1",    "credentialId": "string",    "publicKey": "string",    "createdAt": "2019-08-24T14:15:22Z",    "lastUsedAt": "2019-08-24T14:15:22Z"  }]

Revoke a signing authority DELETE

Revokes a passkey. The account must keep at least one active authority — revoking the last one is rejected (last-credential guard).

Complete credential authentication POST

Next Page