---
title: "Update Mfa Policy"
method: PATCH
path: "/settings/security/mfa"
tags: ["settings"]
---

# Update Mfa Policy

`PATCH /settings/security/mfa`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/settings/security/mfa`
- Auth: API key in cookie `fastapiusersauth`

Require (or stop requiring) a security key at sign-in for all members.

Applies to password, OIDC, and SAML sign-in. Members without a key must
register one before they can continue. The caller must already have one.

## Request body

- MfaPolicyUpdate
  - `mfa_required` boolean, required: Require a security key or passkey at sign-in. Users without one must register one at their next sign-in.

## Response `200`

Successful Response

- MfaPolicyRead
  - `mfa_required` boolean, required
  - `webauthn_available` boolean, required
  - `webauthn_unavailable_reason` string, nullable

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)