List MFA methods for the authenticated identity

GET

/identity-mfas

Returns a cursor-paginated list of multi-factor authentication (MFA) methods configured for the currently authenticated identity, ordered from newest to oldest. An identity has at most one record for each singleton type (email-mobile, authenticator, secure-pin), but may have multiple passkey records — one per registered device. The identity_id is always derived from the bearer token — you cannot list MFA methods belonging to another identity. Fetch the next page by passing the cursor value from the previous response's meta.pagination.cursor field. Sensitive fields such as the encrypted TOTP secret, PIN hash, security question answer hashes, backup code hashes, and the WebAuthn credential public key/challenge are never included in the response; only a has_backup_codes flag, (for secure-pin methods) the security question codes, and (for passkey methods) non-sensitive device metadata are exposed instead.

Request

Authorization

JWT Bearer

Add the parameter

Authorization

to Headers

Example:

Authorization: ********************

Query Params

Responses

🟢200

application/json

MFA methods returned successfully. If meta.pagination.has_more is true, pass meta.pagination.cursor as the cursor query parameter to retrieve the next page.

Bodyapplication/json

🟠400

🟠401

Request Example

Shell

JavaScript

Java

Swift

curl --location '/identity-mfas?cursor=01J5X8PMKW3RNVBQE2D7F9GHAT&limit=20' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Page with results and more available

{
    "message": "Identity MFAs retrieved successfully",
    "status": "success",
    "data": [
        {
            "id": "01J5X8PMKW3RNVBQE2D7F9GHAT",
            "identity_id": "01J5X8PMKW3RNVBQE2D7F9GHBT",
            "type": "authenticator",
            "status": "active",
            "contexts": [
                "login"
            ],
            "system_meta": {
                "email": null,
                "mobile": null,
                "security_questions": null,
                "has_backup_codes": true,
                "passkey": null
            },
            "created": 1754478720000,
            "updated": 1754565120000
        },
        {
            "id": "01J5X8PMKW3RNVBQE2D7F9GH9K",
            "identity_id": "01J5X8PMKW3RNVBQE2D7F9GHBT",
            "type": "secure-pin",
            "status": "active",
            "contexts": [
                "payout"
            ],
            "system_meta": {
                "email": null,
                "mobile": null,
                "security_questions": [
                    "mothers-maiden-name",
                    "first-pet-name"
                ],
                "has_backup_codes": true,
                "passkey": null
            },
            "created": 1753478720000,
            "updated": 1753478720000
        },
        {
            "id": "01J5X8PMKW3RNVBQE2D7F9GH8J",
            "identity_id": "01J5X8PMKW3RNVBQE2D7F9GHBT",
            "type": "email-mobile",
            "status": "pending",
            "contexts": [
                "login"
            ],
            "system_meta": {
                "email": "jane.doe@example.com",
                "mobile": null,
                "security_questions": null,
                "has_backup_codes": false,
                "passkey": null
            },
            "created": 1752478720000,
            "updated": 1752478720000
        },
        {
            "id": "01J5X8PMKW3RNVBQE2D7F9GH7H",
            "identity_id": "01J5X8PMKW3RNVBQE2D7F9GHBT",
            "type": "passkey",
            "status": "active",
            "contexts": [
                "login"
            ],
            "system_meta": {
                "email": null,
                "mobile": null,
                "security_questions": null,
                "has_backup_codes": false,
                "passkey": {
                    "device_id": "device_8f2a1c7d",
                    "device_name": "Jane's iPhone",
                    "device_type": "multiDevice"
                }
            },
            "created": 1751478720000,
            "updated": 1751478720000
        }
    ],
    "meta": {
        "pagination": {
            "cursor": "01J5X8PMKW3RNVBQE2D7F9GH7H",
            "has_more": true
        }
    }
}

Modified at 2026-09-30 00:29:30

Enroll a new MFA method for the authenticated identity

Retrieve an identity MFA method