# Credentials

Register and authenticate using WebAuthn APIs


## Servers

Sandbox environment
```
https://api.sbx.transmitsecurity.io/cis
```

US production environment
```
https://api.transmitsecurity.io/cis
```

EU production environment
```
https://api.eu.transmitsecurity.io/cis
```

CA production environment
```
https://api.ca.transmitsecurity.io/cis
```

AU production environment
```
https://api.au.transmitsecurity.io/cis
```

JP production environment
```
https://api.gasne1-ts01.transmitsecurity.io/cis
```

## Security

### bearer

Type: http
Scheme: bearer
Bearer Format: JWT

### UserAccessToken

A token returned upon end-user authentication, which provides access to resources and data for the user and app for which it was generated

Type: http
Scheme: bearer
Bearer Format: JWT

### AdminAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### ClientAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### OrgAdminAccessToken

A token returned upon B2B authentication for a user that has the organizationAdmin or organizationCreator role.

Type: oauth2
Token URL: /oidc/token
Scopes:

## Download OpenAPI description

 - [Credentials](https://developer.transmitsecurity.com/_bundle/openapi/user/webauthn-credentials.openapi.yaml)

 - [POST /v1/webauthn/register/start](https://developer.transmitsecurity.com/openapi/user/webauthn-credentials.openapi/other/registration-start.md): Start a registration of WebAuthn credentials for a specified user. This requires an authorized authentication session created by a server-side call to `/auth-session/start-with-authorization`. If succ
 - [POST /v1/webauthn/register/complete](https://developer.transmitsecurity.com/openapi/user/webauthn-credentials.openapi/other/registration-complete.md): Complete the WebAuthn credential registration, and obtain the authorization code to exchange for user tokens. Provide the `webauthn_session_id` received in the registration start response. Some fields
 - [POST /v1/webauthn/authenticate/start](https://developer.transmitsecurity.com/openapi/user/webauthn-credentials.openapi/other/startauthentication.md): Start a new WebAuthn authentication. This requires an authentication session, but it can be created from the client side without authorization by calling `/auth-session/start-restricted`. If successfu
 - [POST /v1/webauthn/authenticate/complete](https://developer.transmitsecurity.com/openapi/user/webauthn-credentials.openapi/other/authentication-complete.md): Complete the WebAuthn credential assertion, and obtain the authorization code to exchange for user tokens. Provide the `webauthn_session_id` received in the authentication start response. Some fields
 - [POST /v1/webauthn/authenticate/passkey/start](https://developer.transmitsecurity.com/openapi/user/webauthn-credentials.openapi/other/passkeystart.md): Start a new WebAuthn passkey authentication. This requires an authentication session, but it can be created from the client side without authorization by calling `/auth-session/start-restricted`. If s
 - [POST /v1/webauthn/authenticate/passkey/complete](https://developer.transmitsecurity.com/openapi/user/webauthn-credentials.openapi/other/passkeycomplete.md): Complete the WebAuthn credential assertion, and obtain the authorization code to exchange for user tokens. Provide the `webauthn_session_id` received in the authentication start response. Some fields