Security

List security factors

List security factors. Returns JSON unless otherwise noted.

Authentication

Authorizationbearer token

Requires account.security.read — Read security factors and sessions.

Responses

200Successful response

400The request is invalid

401Authentication is missing or invalid

403The token does not have the required scope

429Rate limit exceeded

const response = await fetch('https://api.ufw.dev/v1/account/factors', {
  method: 'GET',
  headers: {
    Authorization: 'Bearer YOUR_ACCESS_TOKEN',
  },
});

const data = await response.json();

Response200

{
  "factors": [
    {
      "id": "fct_4Wm8Db1Zq5",
      "kind": "TOTP",
      "label": "iPhone",
      "verified_at": "2026-08-11T09:24:05Z",
      "created_at": "2026-08-11T09:24:05Z"
    }
  ]
}