---
title: "Account security overview"
method: GET
path: "/auth/v1/account/security"
tags: ["Auth"]
---

# Account security overview

`GET /auth/v1/account/security`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/auth/v1/account/security`
- Auth: API key in header `apikey` and HTTP bearer

Machine route (apikey + user Bearer). Returns the signed-in user's security surface: linked identities, registered passkeys, password-set state, and — with ?app_origin — current-RP passkey availability.

## Query parameters

- `app_origin` string, uri

## Response `200`

Account security state.

- object

## Other responses

- `401`: Missing or invalid authentication. Run402-originated JSON bodies use the canonical ErrorEnvelope.

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)