GET /api/my-account/logto-configs

Retrieve the exposed portion of the current user's logto config. This includes MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in binding states (skipped). Passkey is a WebAuthn MFA factor and shares the same account center field access control as MFA.

Responses

  • 200 application/json

    The exposed logto config fields were retrieved successfully.

    Hide response attributes Show response attributes object
    • mfa object Required
      Hide mfa attributes Show mfa attributes object
      • enabled boolean
      • skipped boolean Required
      • skipMfaOnSignIn boolean Required
    • passkeySignIn object Required
      Hide passkeySignIn attribute Show passkeySignIn attribute object
      • skipped boolean Required
  • 400

    MFA is not available in the account center.

  • 401

    Permission denied due to insufficient scope.

  • 403

    Forbidden

GET /api/my-account/logto-configs
curl \
 --request GET 'https://[tenant_id].logto.app/api/my-account/logto-configs' \
 --header "Authorization: Bearer $ACCESS_TOKEN"
Response examples (200)
{
  "mfa": {
    "enabled": true,
    "skipped": true,
    "skipMfaOnSignIn": true
  },
  "passkeySignIn": {
    "skipped": true
  }
}