API Reference
Getting Started
Core Concepts
Backend API — Guides
Frontend API — Guides
OAuth & OpenID Connect — Guides
Enterprise: SSO & SCIM — Guides
Webhooks — Guides
SDKs
Backend API (BAPI)
Frontend API (FAPI)
Dashboard API
Public API
SCIM
OIDC
Platform

Risk Based Mfa

AdminUpdated Sep 11, 2026

Risk Based Mfa

Backend API — secret key (Authorization: Bearer sk_…).

2 routes. Each row is one endpoint with its explanation, required scope, and whether it honours the Idempotency-Key header.

Method & path

Scope

Idem

Explanation

GET /v1/risk_based_mfa

risk_based_mfa:read

Read the instance's adaptive (risk-based) MFA policy: enabled, step-up threshold, no-factor handling, and the signal weights/toggles.

PATCH /v1/risk_based_mfa

risk_based_mfa:write

Tune adaptive MFA: enable it, set the step-up threshold and the high-risk-no-factor policy, and adjust the per-signal weights/toggles. Off by default; it can only add friction, never weaken the gate.

Was this page helpful?