---
title: "Update logto config"
method: PATCH
path: "/api/my-account/logto-configs"
tags: ["My account"]
---

# Update logto config

`PATCH /api/my-account/logto-configs`

Update the exposed portion of the current user's logto config. Supports updating MFA states (enabled, skipped, skipMfaOnSignIn) and passkey sign-in binding states (skipped). Passkey is a WebAuthn MFA factor and shares the same account center field access control as MFA.

## Request body

- object
  - `mfa` object
    - `enabled` boolean — Set whether MFA is enabled for the user.
    - `skipped` boolean — Set whether the user is marked as having skipped MFA binding.
    - `additionalBindingSuggestionSkipped` boolean
    - `skipMfaOnSignIn` boolean — Set whether the user has opted to skip MFA verification on sign-in. This is ignored when the MFA policy is mandatory.
  - `passkeySignIn` object
    - `skipped` boolean — Set whether the user has persistently skipped binding a passkey for sign-in.

## Response `200`

The exposed logto_config fields were updated successfully.

- object
  - `mfa` object, required
    - `enabled` boolean
    - `skipped` boolean, required
    - `skipMfaOnSignIn` boolean, required
  - `passkeySignIn` object, required
    - `skipped` boolean, required

## Other responses

- `400` — The request body is invalid.
- `401` — Permission denied due to insufficient scope.
- `403` — Forbidden

---

[API](https://skmtc.net/logto/apis/logto-api-references.md) · [All operations](https://skmtc.net/logto/apis/logto-api-references/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/logto/logto-api-references/revisions/0287c6a59eba/schema)