How to Use the Hanko (Passkey Auth) MCP in Vercel AI SDK

Q: How do I initialize a passwordless login using Hanko (Passkey Auth) and Vercel AI SDK?

Call passkeylogininit through the MCP client to fetch the cryptographic challenge. Your Vercel AI SDK frontend receives this payload via the streaming text response, passes it to the browser's WebAuthn API, and then sends the result to passkeyloginfinalize to complete the Hanko session.

Q: Can I handle multi-step identity flows with Hanko (Passkey Auth) in Vercel AI SDK?

Yes, you can feed the output of flowexecute directly into your streaming UI. This lets your Vercel AI SDK agent guide users through complex onboarding steps, displaying real-time instructions as each phase of the Hanko flow executes.

Q: How do I clean up stale Hanko user keys using this MCP Server in Vercel AI SDK?

Run passkeylistcredentials to identify the registered keys associated with a user account. If a key is lost, your Vercel AI SDK agent passes its ID to passkeydeletecredential to revoke access instantly.

Q: Where does Vercel AI SDK store Hanko (Passkey Auth) session tokens?

Session tokens verified via publicvalidatesession are processed entirely in memory within the secure V8 sandbox. Neither Vercel AI SDK nor Vinkius stores these tokens permanently, ensuring that sensitive session data is discarded immediately after verification.

Build live-updating passwordless auth dashboards by streaming Hanko (Passkey Auth) MCP tools directly into Vercel AI SDK frontends.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Hanko (Passkey Auth) MCP to Vercel AI SDK

Create your Vinkius account to connect Hanko (Passkey Auth) to Vercel AI SDK and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Hanko (Passkey Auth) with Vercel AI SDK

Ask AI about this MCP

ChatGPT

Claude

Perplexity

Live-streaming WebAuthn registration status

The `passkey_registration_init` tool kicks off the WebAuthn registration process by generating public key options for the browser. Your Vercel AI SDK client calls this tool and streams the JSON challenge payload directly to your React or Next.js frontend without making the user wait for a full page reload. Once the browser completes the hardware prompt, your Vercel AI SDK frontend streams the credential back to complete the Hanko registration. The agent then calls `passkey_registration_finalize` to write the passkey to Hanko, updating the streaming UI state instantly to show a successful setup.

Instant session validation inside Vercel AI SDK

The `public_validate_session` tool checks Hanko session tokens to verify user identities on the fly. When your Vercel AI SDK edge functions process incoming streaming requests, the agent runs this check to block unauthorized prompts before they consume your LLM token budget. By combining this validation with `public_get_jwks`, your Vercel AI SDK streaming application verifies signatures locally. This setup minimizes round-trip latency to Hanko auth servers, keeping your chat interface fast and secure.

Admin user lookup via Vercel AI SDK MCP Server

The `admin_get_user` tool pulls complete profile data for any registered Hanko user directly into your Vercel AI SDK chat interface. Support agents using your Vercel AI SDK client can ask for user details and watch the profile load live in the chat window, eliminating the need to open a separate admin dashboard. If a user loses their physical security key, the Vercel AI SDK agent uses `admin_list_user_credentials` to find the stale key. It then triggers `passkey_delete_credential` to clean up the Hanko account, streaming the confirmation directly to the helper's terminal.

Setup guide

Set up Hanko (Passkey Auth) MCP in Vercel AI SDK

Prerequisites

Node.js 18+ and a TypeScript project
ai + @modelcontextprotocol/sdk packages
Active Vinkius subscription with a valid endpoint token

1

Install dependencies

Run npm install ai @modelcontextprotocol/sdk plus your preferred model provider (e.g. @ai-sdk/openai).
2

Create the Streamable HTTP transport

Use StreamableHTTPClientTransport with your Vinkius endpoint URL. Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com.
3

Discover and use tools

Call mcpClient.tools() to auto-discover all Hanko (Passkey Auth) tools. Pass them directly to generateText() or streamText() — no manual schema definitions needed.
4

Works with any model provider

Swap openai("gpt-4o") for any AI SDK provider — Anthropic, Google, Mistral. The MCP tools work identically across all supported models.

index.ts

import { experimental_createMCPClient as createMCPClient } from "ai";
import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp";
import { generateText } from "ai";
import { openai } from "@ai-sdk/openai";

const transport = new StreamableHTTPClientTransport(
  new URL("https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp")
);

const mcpClient = await createMCPClient({ transport });
const tools = await mcpClient.tools();

const { text } = await generateText({
  model: openai("gpt-4o"),
  tools,
  prompt: "List recent Hanko (Passkey Auth) transactions",
});

console.log(text);
await mcpClient.close();

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Hanko. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Hanko (Passkey Auth) now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Hanko (Passkey Auth) MCP in Vercel AI SDK

Call `passkey_login_init` through the MCP client to fetch the cryptographic challenge. Your Vercel AI SDK frontend receives this payload via the streaming text response, passes it to the browser's WebAuthn API, and then sends the result to `passkey_login_finalize` to complete the Hanko session.

Yes, you can feed the output of `flow_execute` directly into your streaming UI. This lets your Vercel AI SDK agent guide users through complex onboarding steps, displaying real-time instructions as each phase of the Hanko flow executes.

Your Vercel AI SDK agent fetches the JSON Web Key Set using `public_get_jwks`. It then validates incoming Hanko JWTs at the edge, meaning you do not have to hit the Hanko API on every single message in your streaming chat.

Run `passkey_list_credentials` to identify the registered keys associated with a user account. If a key is lost, your Vercel AI SDK agent passes its ID to `passkey_delete_credential` to revoke access instantly.

Session tokens verified via `public_validate_session` are processed entirely in memory within the secure V8 sandbox. Neither Vercel AI SDK nor Vinkius stores these tokens permanently, ensuring that sensitive session data is discarded immediately after verification.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript