# Replace webauthn credentials URL: https://docs.hanzo.ai/docs/openapi/iam/updatewebauthncredential > Renames a registered passkey or security key, so a person can tell their devices apart. `PUT /v1/iam/webauthn-credentials/{owner}/{name}` > [IAM →](https://docs.hanzo.ai/docs/openapi/iam) · [All API references →](https://docs.hanzo.ai/docs/openapi) · [Get started →](https://docs.hanzo.ai/docs/guides) | | | | ------------- | ----------------------------------------------------------------- | | **Address** | `https://api.hanzo.ai/v1/iam/webauthn-credentials/{owner}/{name}` | | **Method** | `PUT` | | **Operation** | `updateWebauthnCredential` | | **Auth** | `Authorization: Bearer $HANZO_API_KEY` | Renames a registered passkey or security key, so a person can tell their devices apart. A credential that is not there answers "nothing changed" rather than an error, so the call is safe to repeat. ## Request 23 fields, body `application/json` (required). | Field | In | Type | Required | Description | | ------------------- | ---- | ------------------ | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `owner` | path | string | yes | | | `name` | path | string | yes | | | `aaguid` | body | string | — | | | `attachment` | body | string | — | | | `attestationFormat` | body | string | — | AttestationFormat is the statement format the authenticator attested in ("packed", "apple", "none", …), which is a DIFFERENT value from the attestation type above. | | `attestationType` | body | string | — | | | `backupEligible` | body | boolean | — | | | `backupState` | body | boolean | — | | | `cloneWarning` | body | boolean | — | | | `createdAt` | body | string (date-time) | — | | | `createdTime` | body | string | — | | | `credentialId` | body | string | — | | | `deleted` | body | boolean | — | | | `id` | body | string | — | | | `name` | body | string | — | | | `owner` | body | string | — | | | `publicKey` | body | string | — | | | `signCount` | body | integer (uint32) | — | | | `transport` | body | string\[] | — | | | `updatedAt` | body | string (date-time) | — | | | `user` | body | string | — | | | `userPresent` | body | boolean | — | | | `userVerified` | body | boolean | — | | ## Response | Status | Body | Meaning | | --------- | ------------------------------------ | ----------------- | | `200` | iam.webauthnCredentialMutationResult | ok | | `202` | Approval | held for approval | | `default` | problem-details | refused | `200` body — 23 fields. | Field | In | Type | Always | Description | | -------------------------------------- | ---- | ---------------------- | ------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `affected` | body | boolean | — | | | `webauthnCredential` | body | iam.WebauthnCredential | — | | | `webauthnCredential.aaguid` | body | string | — | | | `webauthnCredential.attachment` | body | string | — | | | `webauthnCredential.attestationFormat` | body | string | — | AttestationFormat is the statement format the authenticator attested in ("packed", "apple", "none", …), which is a DIFFERENT value from the attestation type above. | | `webauthnCredential.attestationType` | body | string | — | | | `webauthnCredential.backupEligible` | body | boolean | — | | | `webauthnCredential.backupState` | body | boolean | — | | | `webauthnCredential.cloneWarning` | body | boolean | — | | | `webauthnCredential.createdAt` | body | string (date-time) | — | | | `webauthnCredential.createdTime` | body | string | — | | | `webauthnCredential.credentialId` | body | string | — | | | `webauthnCredential.deleted` | body | boolean | — | | | `webauthnCredential.id` | body | string | — | | | `webauthnCredential.name` | body | string | — | | | `webauthnCredential.owner` | body | string | — | | | `webauthnCredential.publicKey` | body | string | — | | | `webauthnCredential.signCount` | body | integer (uint32) | — | | | `webauthnCredential.transport` | body | string\[] | — | | | `webauthnCredential.updatedAt` | body | string (date-time) | — | | | `webauthnCredential.user` | body | string | — | | | `webauthnCredential.userPresent` | body | boolean | — | | | `webauthnCredential.userVerified` | body | boolean | — | | Failure carries the platform error shape — see [Errors](https://docs.hanzo.ai/docs/errors). ## Examples **CLI** ```bash hanzo iam webauthn-credentials owner set ``` **SDK** **.ts** ```ts import { Configuration, IamApi } from 'hanzoai'; const api = new IamApi(new Configuration({ accessToken: process.env.HANZO_API_KEY })); const { data } = await api.updateWebauthnCredential({ owner: 'owner', name: 'name', aaguid: "", attachment: "" }); ``` **.py** ```python from hanzoai.cloud import ApiClient, Configuration from hanzoai.cloud.api import IamApi client = ApiClient(Configuration(access_token=os.environ["HANZO_API_KEY"])) result = IamApi(client).update_webauthn_credential(owner='owner', name='name', aaguid="", attachment="") ``` **.go** ```go cfg := hanzoai.NewConfiguration() cfg.AddDefaultHeader("Authorization", "Bearer "+os.Getenv("HANZO_API_KEY")) client := hanzoai.NewAPIClient(cfg) resp, _, err := client.IamAPI.UpdateWebauthnCredential(context.Background()).Execute() if err != nil { return err } ``` **.rs** ```rust use hanzo_client::apis::{configuration::Configuration, iam_api}; let mut cfg = Configuration::new(); cfg.bearer_access_token = std::env::var("HANZO_API_KEY").ok(); let result = iam_api::update_webauthn_credential(&cfg, Default::default()).await?; ``` **.java** ```java import ai.hanzo.cloud.ApiClient; import ai.hanzo.cloud.api.IamApi; ApiClient client = new ApiClient(); client.setBearerToken(System.getenv("HANZO_API_KEY")); var result = new IamApi(client).updateWebauthnCredential(); ``` **HTTP** ```bash curl -X PUT https://api.hanzo.ai/v1/iam/webauthn-credentials// \ -H "Authorization: Bearer $HANZO_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "aaguid": "", "attachment": "" }' ``` **MCP** MCP reaches **iam** through the `iam` tool, which names its 44 operations with its own verbs — this one among them, under a name only MCP declares. `describe` explains any of them: ```bash curl -X POST https://api.hanzo.ai/v1/mcp \ -H "Content-Type: application/json" \ -d '{ "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "describe", "arguments": { "op": "list_iam_applications" } } }' ``` --- [IAM API](https://docs.hanzo.ai/docs/openapi/iam) · [All Hanzo APIs](https://docs.hanzo.ai/docs/openapi) · [Interactive reference](https://docs.hanzo.ai/docs/openapi/reference)