Dual well-known pack generator
Enter RP ID and origins. Download both JSON files and a Pages headers recipe — nothing is uploaded.
Host both well-known files on this RP ID domain. Do not include https://.
Distinct registrable labels: 0 (browsers typically support ≤5). Origins matching the RP ID are skipped.
Empty {} is valid if you only want to signal passkey support.
/.well-known/webauthn
/.well-known/passkey-endpoints
Cloudflare Pages _headers recipe
Static hosts often serve extensionless files as text/plain. WebAuthn clients require application/json.
Why two files?
Multi-brand / multi-ccTLD sites need both /.well-known/webauthn (Related Origin Requests) and /.well-known/passkey-endpoints, served as extensionless application/json. This tool builds both plus a Pages recipe. Deploy steps: how-to · scenarios: use cases. For validation-only of an existing related-origins JSON, see passkeys.dev validator.