---
title: "List authenticators for the current identity"
method: GET
path: "/current-identity/authenticators"
tags: ["Current API Session"]
---

# List authenticators for the current identity

`GET /current-identity/authenticators`

## Request

- Base URL: `https://demo.ziti.dev/edge/client/v1`
- URL: `https://demo.ziti.dev/edge/client/v1/current-identity/authenticators`
- Auth: one of:
  - API key in header `zt-session`
  - OAuth 2
    - Authorization code: `/oidc/authorize`
    - Token URL: `/oidc/token` scopes: `openid`
- TypeScript: <https://skmtc.dev/openziti/apis/ziti-edge-client/docs/current-identity/authenticators/get.ts> (a function with typed inputs; its response is checked against the schema)

Retrieves a list of authenticators assigned to the current API session's identity; supports filtering, sorting, and pagination.

## Query parameters

- `limit` integer
- `offset` integer
- `filter` string

## Response `200`

A list of authenticators

- ListAuthenticatorsEnvelope
  - `data` AuthenticatorDetail[]: An array of authenticator resources
    - `_links` object, required: A map of named links
    - `createdAt` string, date-time, required
    - `id` string, required
    - `tags` Tags
    - `updatedAt` string, date-time, required
    - `certPem` string
    - `extendRequestedAt` string, date-time, nullable
    - `fingerprint` string
    - `identity` EntityRef, required: A reference to another resource and links to interact with it
      - `_links` object: A map of named links
      - `entity` string
      - `id` string
      - `name` string
    - `identityId` string, required
    - `isExtendRequested` boolean
    - `isIssuedByNetwork` boolean
    - `isKeyRollRequested` boolean
    - `lastAuthResolvedToRoot` boolean
    - `lastExtendRolledKeys` boolean
    - `method` string, required
    - `username` string
  - `meta` Meta
    - `apiEnrollmentVersion` string
    - `apiVersion` string
    - `filterableFields` string[]
    - `pagination` Pagination
      - `limit` number, required
      - `offset` number, required
      - `totalCount` number, required

## Other responses

- `400`: The supplied request contains invalid fields or could not be parsed (json and non-json bodies). The error's code, message, and cause fields can be inspected for further information
- `401`: The supplied session does not have the correct access rights to request this resource

## Changes

- **2026-10-14** `f7b51eaafbbb`: 1 breaking
  - the response property `data/items/allOf[#/components/schemas/baseEntity]/tags` became nullable for the status `200`
- **2025-11-04** `e8b8c6cc7e72`: 5 info
  - added the optional property `data/items/allOf[subschema #2]/extendRequestedAt` to the response with the `200` status
  - added the optional property `data/items/allOf[subschema #2]/isExtendRequested` to the response with the `200` status
  - added the optional property `data/items/allOf[subschema #2]/isKeyRollRequested` to the response with the `200` status
  - added the optional property `data/items/allOf[subschema #2]/lastAuthResolvedToRoot` to the response with the `200` status
  - …1 more
- **2024-09-04** `ff9658915fee`: 1 info
  - added the optional property `data/items/allOf[subschema #2]/isIssuedByNetwork` to the response with the `200` status
- **2024-05-29** `cce2800c1357`: 9 warning
  - the optional response header `WWW-Authenticate` removed for the status `200`
  - the optional response header `WWW-Authenticate` removed for the status `400`
  - the optional response header `WWW-Authenticate` removed for the status `401`
  - removed the optional property `data/items/allOf[subschema #2]/extendRequestedAt` from the response with the `200` status
  - …5 more

[Operation history](https://skmtc.dev/openziti/apis/ziti-edge-client/changes/current-identity/authenticators/get.md)

---

[API](https://skmtc.dev/openziti/apis/ziti-edge-client.md) - [All operations](https://skmtc.dev/openziti/apis/ziti-edge-client/llms.txt) - [OpenAPI document](https://skmtc.dev/openziti/apis/ziti-edge-client/revisions/f7b51eaafbbb?raw)