---
title: "Returns the auth-relevant configuration for an app. This endpoint is anonymous — SDK clients call it before login to discover which SSO / auth methods are enabled without needing an API key. The app is identified by the required `x-app-id` header."
method: GET
path: "/v1/account/auth/app-config"
tags: ["account"]
---

# Returns the auth-relevant configuration for an app. This endpoint is anonymous — SDK clients call it before login to discover which SSO / auth methods are enabled without needing an API key. The app is identified by the required \`x-app-id\` header.

`GET /v1/account/auth/app-config`

## Request

- Base URL: `https://api.thebridge.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://api.thebridge.dev/v1/account/auth/app-config`
- Auth: none declared. Required headers: `x-app-id`

## Headers

- `x-app-id` string, required

## Response `200`

- GetAppConfigResponseDto
  - `name` string, required
  - `passkeysEnabled` boolean, required
  - `magicLinkEnabled` boolean, required
  - `mfaEnabled` boolean, required
  - `tenantSelfSignup` boolean, required
  - `googleSsoEnabled` boolean, required
  - `linkedinSsoEnabled` boolean, required
  - `azureAdSsoEnabled` boolean, required
  - `facebookSsoEnabled` boolean, required
  - `githubSsoEnabled` boolean, required
  - `appleSsoEnabled` boolean, required
  - `allowedOrigins` string[], required: Public-safe list of origins permitted to talk to this app's SDK surfaces. Consumed by the AppSync Events Lambda authorizer to gate anonymous `app:<appId>` channel subscriptions (TBP-148.3).

---

[API](https://skmtc.dev/thebridge/apis/bridge-api.md) · [All operations](https://skmtc.dev/thebridge/apis/bridge-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thebridge/apis/bridge-api/revisions/290fffcb3d80?raw)