---
updatedAt: 2026-05-25T14:57:38.000Z
agentTools:
  projectIndex: https://docs.striga.com/llms.txt
---

# List enrolled passkeys

# OpenAPI definition

```json
{
  "openapi": "3.0.0",
  "info": {
    "version": "1.0.0",
    "title": "Striga Strong Customer Authentication",
    "description": "Endpoints for Striga's Strong Customer Authentication (SCA): factor enrollment, unified SCA login, transaction approval, and Trusted Beneficiary management. SCA supports authenticator (TOTP), passkey, and SMS verification for both individual and business accounts. Each request is authenticated with your API key and an HMAC signature."
  },
  "servers": [
    {
      "url": "https://www.sandbox.striga.com/api/v1",
      "description": "Sandbox"
    },
    {
      "url": "https://www.striga.com/api/v1",
      "description": "Production"
    }
  ],
  "tags": [
    {
      "name": "Enrollment",
      "description": "Enroll the user in TOTP or passkey factors and manage enrolled passkeys (up to five per user; removal is a two-step SCA ceremony). SMS verification is always available."
    }
  ],
  "paths": {
    "/user/passkey/list": {
      "post": {
        "tags": [
          "Enrollment"
        ],
        "operationId": "listPasskeys",
        "summary": "List enrolled passkeys",
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "type": "object",
                "required": [
                  "userId"
                ],
                "properties": {
                  "userId": {
                    "type": "string"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Enrolled passkeys plus the current MFA state.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "required": [
                    "credentials",
                    "multiFactorAuth"
                  ],
                  "properties": {
                    "credentials": {
                      "type": "array",
                      "items": {
                        "type": "object",
                        "description": "WebAuthn credential details.",
                        "properties": {
                          "id": {
                            "type": "string"
                          },
                          "credentialId": {
                            "type": "string"
                          },
                          "displayName": {
                            "type": "string"
                          },
                          "name": {
                            "type": "string"
                          },
                          "relyingPartyId": {
                            "type": "string"
                          },
                          "transports": {
                            "type": "array",
                            "items": {
                              "type": "string"
                            }
                          },
                          "insertInstant": {
                            "type": "integer"
                          },
                          "lastUseInstant": {
                            "type": "integer"
                          },
                          "userAgent": {
                            "type": "string"
                          }
                        }
                      }
                    },
                    "multiFactorAuth": {
                      "type": "object",
                      "required": [
                        "enabled",
                        "enrolledMethods",
                        "passkeyCount"
                      ],
                      "properties": {
                        "enabled": {
                          "type": "boolean"
                        },
                        "primaryMethod": {
                          "type": "string",
                          "enum": [
                            "totp",
                            "passkey",
                            "sms"
                          ]
                        },
                        "enrolledMethods": {
                          "type": "array",
                          "items": {
                            "type": "string",
                            "enum": [
                              "totp",
                              "passkey",
                              "sms"
                            ]
                          }
                        },
                        "passkeyCount": {
                          "type": "integer",
                          "minimum": 0
                        }
                      }
                    }
                  }
                }
              }
            }
          },
          "400": {
            "description": "Request was rejected. The `errorCode` field disambiguates.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "required": [
                    "message",
                    "errorCode"
                  ],
                  "properties": {
                    "message": {
                      "type": "string"
                    },
                    "errorCode": {
                      "type": "string"
                    },
                    "reason": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          },
          "401": {
            "description": "Invalid API key or HMAC signature.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "required": [
                    "message",
                    "errorCode"
                  ],
                  "properties": {
                    "message": {
                      "type": "string"
                    },
                    "errorCode": {
                      "type": "string"
                    }
                  }
                }
              }
            }
          }
        },
        "security": [
          {
            "apiKey": [],
            "authorization": []
          }
        ]
      }
    }
  },
  "components": {
    "securitySchemes": {
      "apiKey": {
        "type": "apiKey",
        "in": "header",
        "name": "api-key",
        "description": "Your Striga API key."
      },
      "authorization": {
        "type": "apiKey",
        "in": "header",
        "name": "Authorization",
        "description": "HMAC signature over the request body."
      }
    }
  }
}
```