Skip to main content
Get passkey session
curl --request GET \
  --url https://grid.squads.xyz/api/grid/v1/passkeys/find \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'x-grid-environment: <x-grid-environment>' \
  --data '
{
  "metaInfo": {
    "appName": "<string>",
    "redirectUrl": "<string>"
  },
  "baseUrl": "<string>",
  "sessionKey": "<unknown>"
}
'
{
  "url": "<string>"
}
The “Try It” feature is disabled for this endpoint because it initiates a WebAuthn ceremony that returns a URL. Testing requires completing the ceremony in a browser. Use the Integration Guide for implementation examples.
Generates a session URL containing a WebAuthn challenge for passkey account lookup operations. Use when you need to find a passkey account but don’t have the authenticator response yet.
This endpoint returns a URL for initiating a passkey lookup ceremony, while Find Passkey Account (POST /passkeys/find) accepts an authenticator response and returns account details.

​
Implementation Flow

1

Request Session URL

GET /passkeys/find to retrieve session URL
2

Load UI

Display URL in iframe (web) or WebBrowser (mobile)
3

User Selects Passkey

User completes WebAuthn get() ceremony
4

Receive Result

Hosted UI returns passkey account address via postMessage or redirect

​
GET vs POST Comparison

FeatureGET /passkeys/find (This Endpoint)POST /passkeys/find
PurposeGet session URL for lookupSubmit response to find account
InputNone (headers only)Authenticator response
OutputURL with challengePasskey account address + session
Creates Session KeyNoYes
Challenge is valid for 60 seconds. This endpoint doesn’t create a session key—use /passkeys/auth for that.

Authorizations

​
Authorization
string
header
required

Your Grid API key from the Grid Dashboard

Headers

​
x-grid-environment
string
required

Solana network environment (sandbox, devnet, mainnet)

Body

application/json
​
metaInfo
object
required
​
baseUrl
string | null
​
sessionKey
object

Grid v1 API SessionKey type that supports backward-compatible deserialization from both raw bytes array (old format) and base58 string (new format). Always serializes to base58 string format.

Response

Passkey session URL retrieved successfully

​
url
string
required