---
title: "Get Mfa Policy"
method: GET
path: "/settings/security/mfa"
tags: ["settings"]
---

# Get Mfa Policy

`GET /settings/security/mfa`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/settings/security/mfa`
- Auth: API key in cookie `fastapiusersauth`

Whether members must sign in with a security key.

## Response `200`

Successful Response

- MfaPolicyRead
  - `mfa_required` boolean, required
  - `webauthn_available` boolean, required
  - `webauthn_unavailable_reason` string, nullable

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)