Browse the API reference

Remove Passkey

delete/v1/auth/passkeys/{passkey_id}

Part of Auth.

Remove one passkey after re-authentication (password or fresh assertion). The last passkey of an MFA-required role cannot be removed while enforcement is active.

Authentication

Authenticate with:

  • API key in the X-API-Key header.

Path parameters

NameTypeDescription
passkey_idrequiredstringPasskey Id

Request body

Required, application/json.

FieldTypeDescription
passwordoptionalstring

Current password (password-holding users)

assertionoptionalobject

Fresh WebAuthn assertion from the re-auth ceremony

Example request

curl
curl -X DELETE "https://api.robosystems.ai/v1/auth/passkeys/{passkey_id}" \
  -H "X-API-Key: $ROBOSYSTEMS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "password": "string",
  "assertion": {}
}'

Responses

200 Successful Response

FieldTypeDescription
successoptionalboolean

Indicates the operation completed successfully

Default: true

messagerequiredstring

Human-readable success message

dataoptionalobject

Optional additional data related to the operation

StatusMeaning
400Invalid request
401Re-authentication failed
409Last passkey of an MFA-required role
422Validation Error
429Rate limit exceeded
500Internal server error