How to register and manage domains for your organization.
Domain Setup
Why Domains Matter
Passkeys are tied to a specific domain by the browser. This is a security feature -- a passkey created on example.com cannot be used on evil.com.
When creating wallets via the BaaS API, the rpIdHash you provide must match a domain registered for your organization. This ensures wallet creation is tied to your authorized domains.
Registering a Domain
Domain registration is done through the Passkallet dashboard (not through the BaaS API). Navigate to your organization settings to add domains.
When registering a domain, you provide:
| Field | Example | Notes |
|---|---|---|
| Origin | https://app.example.com | The full origin URL |
| RP ID | app.example.com | The relying party ID (usually just the domain) |
| Description | Production app domain | Optional description |
Get Domain Info via BaaS API
Endpoint: GET /baas/domains/info?origin=...
Required scope: domain:read
Returns domain authorization, fee, owner, and treasury information from the on-chain domain registry.
bash
curl "https://gateway.dev.passkallet.com/sepolia/api/v1/passkallet/baas/domains/info?origin=https://app.example.com" \
-H "x-api-key: pk_live_a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4"