---
title: "MFA Status"
method: GET
path: "/v1/auth/mfa/status"
tags: ["Auth: MFA"]
---

# MFA Status

`GET /v1/auth/mfa/status`

## Request

- Base URL: `https://api.robosystems.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.robosystems.ai/v1/auth/mfa/status`
- Auth: API key in header `X-API-Key`

The authenticated user's MFA posture for account settings.

## Response `200`

Successful Response

- MfaStatusResponse: The user's MFA posture, for account settings.
  - `passkey_count` integer, required: Enrolled passkey count
  - `recovery_codes_remaining` integer, required: Unused recovery codes remaining
  - `enforcement_applies` boolean, required: Whether the MFA requirement applies to this user's roles

## Other responses

- `400`: Invalid request
- `429`: Rate limit exceeded
- `500`: Internal server error

---

[API](https://skmtc.dev/robosystems/apis/robosystems-api.md) · [All operations](https://skmtc.dev/robosystems/apis/robosystems-api/llms.txt) · [OpenAPI document](https://skmtc.dev/robosystems/apis/robosystems-api/revisions/e661e2d5ca6a?raw)