---
title: "Changes to List all of the MFA factors for a user."
method: GET
path: "/admin/users/{userId}/factors"
---

# Changes to List all of the MFA factors for a user.

`GET /admin/users/{userId}/factors`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 6 of 51 revisions.

- **2025-09-24** `a222d9459767`: 1 warning, 1 info
- **2025-02-07** `4d0f1a6c1ad9`: 1 breaking, 3 info
- **2024-10-11** `f89bf040698f`: 1 breaking, 4 info
- **2024-08-01** `b33a9ea8493e`: 1 info
- **2023-12-13** `77f9aeb9339a`: 3 info
- **2023-02-01** `144a34ca6d74`: 11 warning

## Changes

- **2025-09-24** `a222d9459767`: 1 warning, 1 info
  - removed the optional property `items/web_authn_credential` from the response with the `200` status
  - added the optional property `items/webauthn_credential` to the response with the `200` status
- **2025-02-07** `4d0f1a6c1ad9`: 1 breaking, 3 info
  - the `items/web_authn_credential` response's property type changed from `jsonb` to `string` for status `200`
  - added the optional property `error_code` to the response with the `401` status
  - added the optional property `error_code` to the response with the `403` status
  - added the optional property `error_code` to the response with the `404` status
- **2024-10-11** `f89bf040698f`: 1 breaking, 4 info
  - the response property `items/phone` became nullable for the status `200`
  - added the optional property `items/created_at` to the response with the `200` status
  - added the optional property `items/last_challenged_at` to the response with the `200` status
  - added the optional property `items/updated_at` to the response with the `200` status
  - added the optional property `items/web_authn_credential` to the response with the `200` status
- **2024-08-01** `b33a9ea8493e`: 1 info
  - added the optional property `items/phone` to the response with the `200` status
- **2023-12-13** `77f9aeb9339a`: 3 info
  - added the optional property `weak_password` to the response with the `401` status
  - added the optional property `weak_password` to the response with the `403` status
  - added the optional property `weak_password` to the response with the `404` status
- **2023-02-01** `144a34ca6d74`: 11 warning
  - removed the optional property `error_code` from the response with the `401` status
  - removed the optional property `error_code` from the response with the `403` status
  - removed the optional property `error_code` from the response with the `404` status
  - removed the optional property `items/created_at` from the response with the `200` status
  - removed the optional property `items/last_challenged_at` from the response with the `200` status
  - removed the optional property `items/phone` from the response with the `200` status
  - removed the optional property `items/updated_at` from the response with the `200` status
  - removed the optional property `items/webauthn_credential` from the response with the `200` status
  - removed the optional property `weak_password` from the response with the `401` status
  - removed the optional property `weak_password` from the response with the `403` status
  - removed the optional property `weak_password` from the response with the `404` status

---

[Operation](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/docs/admin/users/:userId/factors/get.md) - [API](https://skmtc.dev/supabase/apis/supabase-auth-rest-api.md) - [Page](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/changes/admin/users/:userId/factors/get)