Daon · Schema
UserPasskey
A passkey which is registered to a user.
CompanyDigital IdentityIdentity VerificationAuthenticationBiometricsFraud PreventionMulti-Factor AuthenticationFIDO
Properties
| Name | Type | Description |
|---|---|---|
| permittedOperations | array | |
| createdDtm | string | |
| lastUpdatedDtm | string | |
| id | string | Unique 26-character database user ID. |
| storeId | string | Unique 26-character database store ID. |
| userId | string | Unique 26-character database user ID. |
| relyingPartyId | string | The relying party ID. |
| regPolicyName | string | The relying party's registration policy name. |
| credentialId | string | The ID of the passkey credential generated by the client authenticator. |
| aaguid | string | A unique identifier of the passkey type. |
| status | string | The passkey status: ACTIVE or DISABLED. |
| algorithm | string | The passkey signing algorithm |
| signCounter | integer | The passkey signature counter. How many authentications have been performed by the authenticator. |
| residentKey | boolean | Whether this is a *resident key* meaning a key which is discoverable by the client without a user ID being provided. |
| attestationType | string | The passkey attestation type |
| backupEligible | boolean | Whether this key can be backed up. |
| backupState | boolean | Whether this key is a back-up. |
| transports | array | A list of communication mechanisms with the client impemented by an authenticator. |
| credProtect | integer | The protection level of the passkey. |
| internalId | string | |
| publicKey | object | The public key associated with the authenticator. Used to verify authenticator assertions. |
| friendlyName | string | Passkey friendly name. |
| os | string | User agent operating system. |
| osVersion | string | |
| userAgentName | string | User agent name, for example Chrome. |
| userAgentVersion | string | User agent version. |
| deviceMake | string | |
| deviceModel | string | |
| lastUsedDtm | string | If the key has been used for authentication this field indicates the last time this occurred |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://raw.githubusercontent.com/api-evangelist/daon/main/json-schema/daon-user-passkey-schema.json",
"title": "UserPasskey",
"description": "A passkey which is registered to a user.",
"x-generated": "2026-10-18",
"x-method": "derived",
"x-generator": "derive-json-schema.py",
"x-source": "openapi/daon-trustx-openapi.yml#/components/schemas/UserPasskey",
"type": "object",
"properties": {
"permittedOperations": {
"type": "array",
"items": {
"type": "string"
}
},
"createdDtm": {
"type": "string",
"format": "date-time"
},
"lastUpdatedDtm": {
"type": "string",
"format": "date-time"
},
"id": {
"type": "string",
"description": "Unique 26-character database user ID."
},
"storeId": {
"type": "string",
"description": "Unique 26-character database store ID."
},
"userId": {
"type": "string",
"description": "Unique 26-character database user ID."
},
"relyingPartyId": {
"type": "string",
"description": "The relying party ID."
},
"regPolicyName": {
"type": "string",
"description": "The relying party's registration policy name."
},
"credentialId": {
"type": "string",
"description": "The ID of the passkey credential generated by the client authenticator."
},
"aaguid": {
"type": "string",
"description": "A unique identifier of the passkey type."
},
"status": {
"type": "string",
"description": "The passkey status: ACTIVE or DISABLED.",
"enum": [
"ACTIVE",
"DISABLED"
]
},
"algorithm": {
"type": "string",
"description": "The passkey signing algorithm",
"enum": [
"RS1",
"RS256",
"RS384",
"RS512",
"PS256",
"PS384",
"PS512",
"EDDSA",
"ES256",
"ES384",
"ES512",
"ES256K"
]
},
"signCounter": {
"type": "integer",
"format": "int64",
"description": "The passkey signature counter. How many authentications have been performed by the authenticator."
},
"residentKey": {
"type": "boolean",
"description": "Whether this is a *resident key* meaning a key which is discoverable by the client without a user ID being provided."
},
"attestationType": {
"type": "string",
"description": "The passkey attestation type",
"enum": [
"BASIC",
"SELF",
"ATTESTATION_CA",
"ANON_CA",
"NONE"
]
},
"backupEligible": {
"type": "boolean",
"description": "Whether this key can be backed up."
},
"backupState": {
"type": "boolean",
"description": "Whether this key is a back-up."
},
"transports": {
"type": "array",
"description": "A list of communication mechanisms with the client impemented by an authenticator.",
"items": {
"type": "string",
"enum": [
"usb",
"nfc",
"ble",
"hybrid",
"internal"
]
}
},
"credProtect": {
"type": "integer",
"format": "int32",
"description": "The protection level of the passkey."
},
"internalId": {
"type": "string"
},
"publicKey": {
"type": "object",
"description": "The public key associated with the authenticator. Used to verify authenticator assertions.",
"properties": {
"params": {
"type": "object"
},
"algorithm": {
"type": "string"
},
"format": {
"type": "string"
},
"encoded": {
"type": "string",
"format": "byte"
}
}
},
"friendlyName": {
"type": "string",
"description": "Passkey friendly name."
},
"os": {
"type": "string",
"description": "User agent operating system."
},
"osVersion": {
"type": "string"
},
"userAgentName": {
"type": "string",
"description": "User agent name, for example Chrome."
},
"userAgentVersion": {
"type": "string",
"description": "User agent version."
},
"deviceMake": {
"type": "string"
},
"deviceModel": {
"type": "string"
},
"lastUsedDtm": {
"type": "string",
"format": "date-time",
"description": "If the key has been used for authentication this field indicates the last time this occurred"
}
},
"required": [
"algorithm",
"attestationType",
"credentialId",
"id",
"publicKey",
"regPolicyName",
"relyingPartyId",
"signCounter",
"status",
"storeId",
"userId"
]
}
Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/daon-user-passkey"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.