Skip to main content
GET
Get 2FA Status

Authorizations

Authorization
string
header
required

API key must be provided in the Authorization header

Response

Returns {success: true, tfa_enabled, methods: [...], backup_codes_remaining, new_method_authorized}.

success
boolean

Always true on success

tfa_enabled
boolean

Whether 2FA is currently enabled for the user

methods
object[]

Active 2FA methods; phone numbers are masked to the last 4 digits and secrets are omitted

backup_codes_remaining
integer

Number of unused backup codes remaining

new_method_authorized
boolean

Whether the user has completed pre-authorization for adding a new 2FA method