Compatible with every major AI agent and IDE
What is the Hanko (Passkey Auth) MCP Server?
Connect your Hanko instance to any AI agent to streamline passkey-based authentication and user management. This server provides a comprehensive interface for WebAuthn flows and administrative user operations.
What you can do
- Passkey Lifecycle — Initialize and finalize WebAuthn registration and login flows for secure, passwordless access.
- Credential Management — List and delete registered WebAuthn credentials for specific users.
- User Administration — Create, retrieve, and list users and their associated credentials via admin tools.
- Transaction Security — Initialize and finalize passkey-signed transactions for sensitive operations like payments.
- Session Validation — Publicly validate sessions and retrieve JWKS for token verification.
How it works
- Subscribe to this server
- Enter your Hanko Tenant ID and API Key
- Start managing identity flows from your MCP-compatible client
Who is this for?
- Developers — quickly test and debug WebAuthn registration and login flows without manual API calls.
- Security Engineers — audit user credentials and manage identity access policies through a conversational interface.
- Product Teams — simulate and verify user onboarding and transaction signing workflows.
Built-in capabilities (15)
Create a new user via Admin API
Get a user by ID via Admin API
List WebAuthn credentials for a user via Admin API
List users via Admin API
Execute a Hanko Flow action
Delete a WebAuthn credential
List WebAuthn credentials for a user
Finalize a passkey login
Returns publicKey options for navigator.credentials.get(). Initialize a passkey login
Finalize a passkey registration
Returns publicKey options for navigator.credentials.create(). Initialize a passkey registration
Finalize a passkey transaction
g., payment confirmation) for an existing user. Initialize a passkey transaction
Get JSON Web Key Set (JWKS)
Validate a Hanko session token
Why OpenAI Agents SDK?
The OpenAI Agents SDK auto-discovers all 15 tools from Hanko (Passkey Auth) through native MCP integration. Build agents with built-in guardrails, tracing, and handoff patterns. chain multiple agents where one queries Hanko (Passkey Auth), another analyzes results, and a third generates reports, all orchestrated through Vinkius.
- —
Native MCP integration via
MCPServerSse, pass the URL and the SDK auto-discovers all tools with full type safety - —
Built-in guardrails, tracing, and handoff patterns let you build production-grade agents without reinventing safety infrastructure
- —
Lightweight and composable: chain multiple agents and MCP servers in a single pipeline with minimal boilerplate
- —
First-party OpenAI support ensures optimal compatibility with GPT models for tool calling and structured output
Hanko (Passkey Auth) in OpenAI Agents SDK
Hanko (Passkey Auth) and 4,000+ other MCP servers. One platform. One governance layer.
Teams that connect Hanko (Passkey Auth) to OpenAI Agents SDK through Vinkius don't need to source, host, or maintain individual MCP servers. Every tool call runs inside a hardened runtime with credential isolation, DLP, and a signed audit chain.
Raw MCP | Vinkius | |
|---|---|---|
| Server catalog | Find and host yourself | 4,000+ managed |
| Infrastructure | Self-hosted | Sandboxed V8 isolates |
| Credential handling | Plaintext in config | Vault + runtime injection |
| Data loss prevention | None | Configurable DLP policies |
| Kill switch | None | Global instant shutdown |
| Financial circuit breakers | None | Per-server limits + alerts |
| Audit trail | None | Ed25519 signed logs |
| SIEM log streaming | None | Splunk, Datadog, Webhook |
| Honeytokens | None | Canary alerts on leak |
| Custom domains | Not applicable | DNS challenge verified |
| GDPR compliance | Manual effort | Automated purge + export |
Why teams choose Vinkius for Hanko (Passkey Auth) in OpenAI Agents SDK
The Hanko (Passkey Auth) MCP Server runs on Vinkius-managed infrastructure inside AWS — a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts. All 15 tools execute in hardened sandboxes optimized for native MCP execution.
Your AI agents in OpenAI Agents SDK only access the data you authorize, with DLP that blocks sensitive information from ever reaching the model, kill switch for instant shutdown, and up to 60% token savings. Enterprise-grade infrastructure, zero maintenance.

* Every MCP server runs on Vinkius-managed infrastructure inside AWS - a purpose-built runtime with per-request V8 isolates, Ed25519 signed audit chains, and sub-40ms cold starts optimized for native MCP execution. See our infrastructure
How Vinkius secures
Hanko (Passkey Auth) for OpenAI Agents SDK
Every tool call from OpenAI Agents SDK to the Hanko (Passkey Auth) MCP Server is protected by DLP redaction, cryptographic audit chains, V8 sandbox isolation, kill switch, and financial circuit breakers.
Frequently asked questions
How do I start a new passkey registration for a user?
Use the passkey_registration_init tool with the user's ID and username. This will return the necessary WebAuthn options to be used on the client side.
Can I view all WebAuthn credentials associated with a specific user?
Yes, you can use the passkey_list_credentials tool (or admin_list_user_credentials for admin access) to retrieve a list of all registered passkeys for any user ID.
Is it possible to create a user directly through the AI agent?
Absolutely. Use the admin_create_user tool to provision a new user in your Hanko project by providing a unique user ID.
How does the OpenAI Agents SDK connect to MCP?
Use MCPServerSse(url=...) to create a server connection. The SDK auto-discovers all tools and makes them available to your agent with full type information.
Can I use multiple MCP servers in one agent?
Yes. Pass a list of MCPServerSse instances to the agent constructor. The agent can use tools from all connected servers within a single run.
Does the SDK support streaming responses?
Yes. The SDK supports SSE and Streamable HTTP transports, both of which work natively with Vinkius.
MCPServerStreamableHttp not found
Ensure you have the latest version: pip install --upgrade openai-agents
Agent not calling tools
Make sure your prompt explicitly references the task the tools can help with.
Explore More MCP Servers
View all →
Tripleseat
8 toolsManage event bookings, leads, contacts, venues, and accounts for your Tripleseat event management platform through natural conversation.

PDF.co
12 toolsParse, generate, merge, and convert PDF documents programmatically with an API that handles complex document processing tasks.

ClickSend
8 toolsManage SMS and multi-channel messaging via ClickSend — send messages, track history, and monitor inbound SMS directly from any AI agent.

PandaDoc
11 toolsClose deals faster with proposals, contracts, and e-signatures in one platform that tracks document engagement in real time.
