Skip to main content
POST
Complete passkey registration
A signed-in human session with recent authentication is required. Complete password/passkey reauthentication when requested. Verifies the browser’s RegistrationResponseJSON against the stored challenge, origin and RP ID. The first passkey also returns recoveryCodes. Request conventions · API keys · MCP connections

Authorizations

mill_session
string
cookie
required

Signed-in human browser session; mutation requests also need the exact UI Origin

Headers

Origin
string<uri>
required

The exact configured Mill UI origin. Required for browser mutations carrying session cookies.

Body

application/json
challengeId
string
required
Pattern: ^[A-Za-z0-9_-]{43}$
response
object
required

WebAuthn RegistrationResponseJSON from the browser

name
string
required
Required string length: 1 - 120

Response

Successful response. Examples are illustrative; field values vary by record.

Illustrative response shape. Fields can be absent in alternate successful flows; see the operation description and example.

ok
boolean