---
title: "Read the user's MFA registrations"
method: GET
path: "/organizations/{organizationId}/users/{email}/mfa"
---

# Read the user's MFA registrations

`GET /organizations/{organizationId}/users/{email}/mfa`

## Request

- Base URL: `https://api.xfa.tech`
- URL: `https://api.xfa.tech/organizations/{organizationId}/users/{email}/mfa`
- Auth: HTTP bearer

## Response `200`

Safe metadata; absent users have an empty overview.

- MfaSummary
  - `totp` MfaTotp, required
    - `enabled` boolean, required
    - `setupPending` boolean, required
    - `revision` string, required
  - `passkeys` MfaRegistration[], required
    - `id` string, required
    - `authenticatorType` string, required
    - `deviceId` string
    - `revision` string, required
  - `silent` MfaRegistration[], required
    - `id` string, required
    - `authenticatorType` string, required
    - `deviceId` string
    - `revision` string, required
  - `passkeysRevision` string, required
  - `silentRevision` string, required

## Other responses

- `403`: Not authorized for this organization

---

[API](https://skmtc.dev/xfa/apis/xfa-api.md) · [All operations](https://skmtc.dev/xfa/apis/xfa-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xfa/apis/xfa-api/revisions/1a1be0e8972b?raw)