# GET /api/v1/account/two-factor

> The 2FA state for this account

- Group: account
- Tier: R
- Required scope: read:account
- Docs: https://api.inleed.com/reference/account/get-two-factor-status

## Description

Returns `enabled` and `methods[]` (each `id`, `type`, `maskedValue`, `createdAt`). To turn 2FA on or off use `manage_two_factor`.

## Request

```bash
curl -X GET "https://mcp.inleed.com/api/v1/account/two-factor" \
  -H "Authorization: Bearer inl_live_…"
```

## Errors

- **401** No token was presented, or the token is revoked, expired or unknown. — codes: unauthorized, token_expired, token_revoked
- **403** The token lacks a required scope, or this account does not own the resource. — codes: insufficient_scope
- **429** The rate limit for this token is exhausted. See `Retry-After`. — codes: rate_limited
- **500** Something went wrong on our side. The failure is logged against `requestId`. — codes: internal_error

## Related

- GET /api/v1/account — https://api.inleed.com/reference/account/get-account
- POST /api/v1/account/two-factor/enable — https://api.inleed.com/reference/account/enable-two-factor
- POST /api/v1/account/two-factor/confirm — https://api.inleed.com/reference/account/confirm-two-factor
- POST /api/v1/account/two-factor/disable — https://api.inleed.com/reference/account/disable-two-factor