• DATA
  • SECURITY
  • REPORT
  • HUMAN

How to audit user credentials with your AI

Connect Hanko to your AI client to inspect how users are actually logging in. Once connected, your agent can pull specific credential data for any user on demand.

Ask AI about this page

Short answer

How can I audit user credentials with my AI?

Your AI uses Hanko to fetch a list of a user's registered passkeys and authentication devices. This allows you to quickly identify which methods a specific person is using to access your system. You'll get a clear breakdown of their active credentials.

Audit outcomes

Where your data lands

What you get after your AI runs the audit.

DATA

Credential lists

The AI pulls the specific passkeys and device info tied to a user. You get a clear view of their active authentication methods.

SECURITY

Risk identification

Your agent flags unusual or outdated credentials. This helps you spot potential security gaps in user accounts.

REPORT

Audit summaries

The AI organizes the raw credential data into a readable format. You can then use this to document security compliance.

HUMAN

Manual intervention

The AI cannot delete or revoke credentials. You must log in to the Hanko dashboard to remove any suspicious devices.

The workflow

What your AI does when the request arrives.

The AI follows a specific sequence to gather and present your security data.

  1. Identify the user

    The AI first locates the specific account you want to investigate.

    admin_get_user

  2. Fetch credentials

    The agent pulls the full list of passkeys and authentication methods for that user.

    admin_list_user_credentials

  3. Inspect device details

    The AI looks at the specific metadata for each registered credential.

    passkey_list_credentials

  4. Summarize findings

    The AI presents the final list of devices and methods in a clean format for your review.

    admin_list_user_credentials

Try it

Copy these to start.

Use these prompts to kick off an audit.

Starting points

Replace the bracketed names with the actual user IDs or email addresses from your Hanko instance.

Hanko Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_FOAninCZae9duJcms78Myb9CbNaXDk54ffuUq1dU/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Hanko capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "hanko-passkey-auth-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_FOAninCZae9duJcms78Myb9CbNaXDk54ffuUq1dU/mcp"
    }
  }
}
Copy into chat04

  • List all credentials for user_8829 to see their registered passkeys.

  • Check the authentication methods for the account associated with alex@example.com.

  • Get a list of all devices registered to user_4412 and tell me which ones are passkeys.

  • Audit the credentials for user_9901 and summarize their active authentication methods.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Hanko once, then ask.

Just link your Hanko account to Vinkius. Your credentials stay encrypted and your AI client gets immediate access to the tools.

Connect Hanko to your AI

FAQ

How this task behaves

  • 01

    Can my AI delete a user's passkey?

    No. The AI can only read and list credentials. You have to manually revoke passkeys through the Hanko dashboard.

  • 02

    Can the AI change a user's password?

    No. This MCP is designed for auditing and retrieving credential data, not for modifying user account secrets.

  • 03

    Does the AI see my Hanko login details?

    No. Vinkius manages the connection securely so your AI client only sees the tool outputs.

  • 04

    Can I audit all users at once?

    The tools are designed to fetch data for specific users. You'll need to ask the AI to check users one by one or provide a list of IDs.

  • 05

    What information is included in a credential list?

    The AI can retrieve the specific passkeys and device information registered to a user's account.

  • More questions about Hanko? The Connector page answers them. See everything the Hanko Connector can do

Connect Hanko to Claude, Cursor, ChatGPT & more