`GET /auth/mfa/authenticators`

Every activated authenticator app on the account, oldest first. Requires a dashboard session that has passed MFA.

An account may keep several apps — a phone and a laptop, say — and a code from any of them satisfies mfa/verify. Add another with mfa/enroll.

Response 200

{
  "authenticators": [
    {
      "id": "9d0a4d5e-1f2b-4c3d-8e9f-0a1b2c3d4e5f",
      "name": "Work phone",
      "created_at": "2026-06-04T15:44:17Z"
    }
  ]
}

Field	Type	Notes
`id`	string	Pass to `DELETE /auth/mfa/authenticators/{id}`.
`name`	string	Label set at activation. Defaults to `Authenticator app`.
`created_at`	string	ISO-8601 UTC. When the app was activated.

Example

curl "$SEISMIC_ORCHESTRATION_URL/v0/auth/mfa/authenticators" \
  -H "Authorization: Bearer $SEISMIC_DASHBOARD_TOKEN"