Get MFA Status
Returns which second factors the account holds, which is preferred, and whether MFA is on at all.
This is the read a member makes about their own account — the self-service profile (GET /v1/users/{id}/profile) deliberately leaves MFA out and points here.
Read-only. The response carries Cache-Control: no-store: knowing which factors an account holds is exactly what an attacker wants before choosing an approach.
Failures:
404— no such user.503 IDE-0066— the identity provider is unavailable (unreachable, too slow to answer, or failing). Nothing about the request was wrong; retry it later.
GET
Get MFA Status
Authorizations
JWT bearer token issued by the identity provider.
Path Parameters
User ID.
Example:
"00000000-0000-0000-0000-000000000000"

