Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

For your own scripts and server-to-server integrations. Create a key in the app under Settings > Access > API keys and copy it then, because it is shown once. Send it as Authorization: Bearer <key>. The key acts as the member who made it, in the organization it was made in. A call needs the member's permission and one of the key's scopes, such as inventory:read or sales:write. A key with * has every scope.

Body

application/json

A new passkey: a name for it, the authenticator's answer as the JSON the browser's WebAuthn call returns, and the token its options came with.

name
string
required
Maximum string length: 100
credential
string
required
Maximum string length: 16384
token
string
required
Maximum string length: 16384

Response

PasskeyResource

data
PasskeyResource · object
required