---
title: "Get effective human factor auth policy for embedded clients"
method: GET
path: "/v1/treasury/wallets/auth-policy"
tags: ["Treasury Wallets"]
---

# Get effective human factor auth policy for embedded clients

`GET /v1/treasury/wallets/auth-policy`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/treasury/wallets/auth-policy`
- Auth: HTTP bearer

Returns the resolved human factor auth (HFA) policy governing treasury
wallet send, swap, and export, plus the number of passkeys registered
for the calling user. Intended for embedded wallet clients; equivalent
to GET /v1/auth/human-factor-auth with an additional passkey count.
Precedence: user override → platform app → spend policy → defaults.

## Response `200`

Effective HFA policy with passkey registration count

- TreasuryAuthPolicyResponse
  - `policy` HumanFactorAuthPolicy, required
    - `send` 'password_or_passkey' | 'passkey_only' | 'passkey_required' | 'password_only' | 'reauth_token_only'
    - `swap` 'password_or_passkey' | 'passkey_only' | 'passkey_required' | 'password_only' | 'reauth_token_only'
    - `export` 'password_or_passkey' | 'passkey_only' | 'passkey_required' | 'password_only' | 'reauth_token_only'
    - `conditional` object
      - `require_passkey_above_usd` string, nullable
      - `require_passkey_for_new_recipient` boolean
  - `source` string, required: user | platform_app | spend_policy | default
  - `registered_passkeys` integer, required: Number of WebAuthn passkeys registered for the calling user.

## Other responses

- `403`: Insufficient permissions

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/ae109b496830?raw)