Get MFA settings for the user. This endpoint requires the Identities scope. Returns whether the user has enabled MFA and whether MFA verification is skipped at sign-in. enabled is omitted for users who predate the flag, which is treated as enabled when the user has usable factors.
GET
/api/my-account/mfa-settings
curl \
--request GET 'https://[tenant_id].logto.app/api/my-account/mfa-settings' \
--header "Authorization: Bearer $ACCESS_TOKEN"
Response examples (200)
{
"skipMfaOnSignIn": true,
"enabled": true
}