Delete
Deletes one of the authenticated user’s own passkeys. The request body carries a WebAuthn assertion from the passkey being deleted, so possession of the credential is proven before it is removed: mint a deletion challenge for it first, run the ceremony with that passkey, and send the result here. Deleting the user’s last passkey is allowed — their other step-up factors remain. Requires a user session.
Authorizations
An Account API key, account-scoped JWT, App API key, or user OAuth token. Prepend the key or token with Bearer, for example Bearer ***************************.
Headers
Pins the request to a dated API version.
"2026-07-29-1"
Path Parameters
Passkey ID, prefixed wcred_.

