---
title: "Get user security settings"
method: GET
path: "/v1/auth/settings"
tags: ["Authentication"]
---

# Get user security settings

`GET /v1/auth/settings`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/auth/settings`
- Auth: HTTP bearer

## Response `200`

Security settings

- object
  - `require_passkey_for_vaults` boolean
  - `require_passkey_for_mfa` boolean
  - `passkey_count` integer
  - `passkey_requirements_downgraded` boolean: True while this account carries a passkey requirement that the 1claw.xyz → 1claw.co move cleared on its behalf. The two flags above read false, but that was not the user's choice: registering a passkey on the canonical domain restores them.

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)