diff --git a/.changeset/user-client-passkeys-registered.md b/.changeset/user-client-passkeys-registered.md
new file mode 100644
index 00000000..b8b502d7
--- /dev/null
+++ b/.changeset/user-client-passkeys-registered.md
@@ -0,0 +1,7 @@
+---
+"@epilot/user-client": minor
+---
+
+Add `passkeys_registered` to `LoginParameters`
+
+`getUserLoginParameters` now reports whether the user has at least one passkey registered, so the login UI can offer passkey authentication as an alternative to typing an MFA code.
diff --git a/clients/user-client/src/openapi.d.ts b/clients/user-client/src/openapi.d.ts
index fc5db059..8b6af3b2 100644
--- a/clients/user-client/src/openapi.d.ts
+++ b/clients/user-client/src/openapi.d.ts
@@ -441,6 +441,14 @@ declare namespace Components {
              * Whether passkey login is enabled for this organization
              */
             passkey_enabled?: boolean;
+            /**
+             * Whether the user has at least one passkey registered. Lets the login
+             * UI offer passkey authentication as an alternative to an MFA code.
+             * Discloses nothing that :beginPasskeyAuthentication doesn't already
+             * reveal for a known email address.
+             *
+             */
+            passkeys_registered?: boolean;
         }
         /**
          * A customized workplace navigation configuration. The ID is a content-hash, so identical configurations will have the same ID.
diff --git a/clients/user-client/src/openapi.json b/clients/user-client/src/openapi.json
index 1e83a3a2..4d7fc33b 100644
--- a/clients/user-client/src/openapi.json
+++ b/clients/user-client/src/openapi.json
@@ -2443,6 +2443,10 @@
           "passkey_enabled": {
             "type": "boolean",
             "description": "Whether passkey login is enabled for this organization"
+          },
+          "passkeys_registered": {
+            "type": "boolean",
+            "description": "Whether the user has at least one passkey registered. Lets the login\nUI offer passkey authentication as an alternative to an MFA code.\nDiscloses nothing that :beginPasskeyAuthentication doesn't already\nreveal for a known email address.\n"
           }
         }
       },