Passage Id

Passage (acquired by 1Password) is purpose-built for passkeys and passwordless authentication — the simplest way to add passkey support to a web or mobile app. Pre-built frontend components handle the WebAuthn complexity; the Management API handles user lifecycle server-side. For agents: validate JWT tokens, retrieve user data, update user metadata, and manage user device/passkey registrations. Free tier (1,000 MAU). Confidence is docs-derived.

Management REST API at api.passage.id/v1/apps/{app_id}. GET /users lists users. GET /users/{user_id} retrieves user. POST /users creates user ({email}). PATCH /users/{user_id} updates user metadata. DELETE /users/{user_id} deletes user. POST /users/{user_id}/tokens creates magic link token. GET /users/{user_id}/devices lists registered passkey devices. DELETE /users/{user_id}/devices/{device_id} revokes a passkey device. Token validation: POST /authenticate/magic_link validates magic link; or server-side JWT verification (passage-python SDK). Frontend SDK: <passage-auth app-id="{app_id}"> web component — handles passkey registration/auth in-browser.

API key auth: Authorization: Bearer {api_key}. Keys from Passage Console → Apps → {app} → API Keys. HTTPS enforced. No OAuth2. JWT validation: Passage signs auth JWTs with RS256 — validate with JWKS at {app_id}.id.passage.id/v1/jwks. App ID: unique per Passage application — include in all API paths. passage-python SDK: PassageUser(app_id=id, api_key=key) for server-side operations.

Standard HTTP status codes with JSON error bodies ({code, error}). 404 for unknown user ID. Magic link expiry: configurable (default 60 minutes). Passkey: requires HTTPS domain for WebAuthn (localhost exempt). JWT: short-lived (1 hour default) — validate on each request. Free tier (1,000 MAU): monitor usage. Passage uptime at status.passage.id. Device management: users can register multiple passkeys — revoke individual devices without affecting other devices.

docs.passage.id covers Management API reference, JavaScript SDK guide, iOS/Android SDK, JWT validation guide, and passkey setup. Getting started: create Passage account (free), create app, add <passage-auth> component — first passwordless login in under 10 minutes. passage-python: pip install passage-identity. Community via Passage support and documentation. Focused documentation for a specialized passwordless auth platform.