Hanzo
OpenapiIam

Returns the passkeys and security keys registered to one person, newest first —…

Returns the passkeys and security keys registered to one person, newest first — which device each lives on and when it was registered. Yours by default.

GET /v1/iam/webauthn-credentials

Addresshttps://api.hanzo.ai/v1/iam/webauthn-credentials
MethodGET
OperationlistWebauthnCredentials
AuthAuthorization: Bearer $HANZO_API_KEY

Returns the passkeys and security keys registered to one person, newest first — which device each lives on and when it was registered.

Yours by default. Name somebody else and you get them only if you already administer their account, which is the same authority that governs reading their user record — so this list can never show more people than the surface beside it already does.

There is no organization-wide list, by design. Scoping to the ORG would hand an org admin every member's credential rows in one answer and a SuperAdmin every tenant's, while a plain member could not read even their own (an unnamed target fails the Guard's tenant rule). One scope answers both halves cleanly: the answer is a person's, and the caller is that person unless they say otherwise and may.

Request

1 field.

FieldInTypeRequiredDescription
userquerystring

Response

StatusBodyMeaning
200iam.listWebauthnCredentialsOutok

200 body — 22 fields.

FieldInTypeAlwaysDescription
webauthnCredentialsbodyiam.WebauthnCredential[]
webauthnCredentials[].aaguidbodystring
webauthnCredentials[].attachmentbodystring
webauthnCredentials[].attestationFormatbodystringAttestationFormat is the statement format the authenticator attested in ("packed", "apple", "none", …), which is a DIFFERENT value from the attestation type…
webauthnCredentials[].attestationTypebodystring
webauthnCredentials[].backupEligiblebodyboolean
webauthnCredentials[].backupStatebodyboolean
webauthnCredentials[].cloneWarningbodyboolean
webauthnCredentials[].createdAtbodystring (date-time)
webauthnCredentials[].createdTimebodystring
webauthnCredentials[].credentialIdbodystring
webauthnCredentials[].deletedbodyboolean
webauthnCredentials[].idbodystring
webauthnCredentials[].namebodystring
webauthnCredentials[].ownerbodystring
webauthnCredentials[].publicKeybodystring
webauthnCredentials[].signCountbodyinteger
webauthnCredentials[].transportbodystring[]
webauthnCredentials[].updatedAtbodystring (date-time)
webauthnCredentials[].userbodystring
webauthnCredentials[].userPresentbodyboolean
webauthnCredentials[].userVerifiedbodyboolean

Failure carries the platform error shape — see Errors.

Examples

hanzo has no subcommand for this operation — the CLI serves only what cloud's live route table confirms. Use HTTP or an SDK.


IAM API · All Hanzo APIs · Interactive reference

How is this guide?

On this page