# MFA Bypass Monitoring API

The MFA Bypass Monitoring API returns browser cookies stolen from employee devices by infostealer malware, matched to your domain and enriched with device and source context. A leaked session cookie lets an attacker skip the login page entirely - even with a strong password and MFA.

- [Introduction](mfa-bypass-monitoring-what-is) - coverage, sources, and enrichment.
- [Quickstart](mfa-bypass-monitoring-quickstart) - your first request in 4 steps.
- [Filters](mfa-bypass-monitoring-filters) - narrow by `cookie_type`, `browser`, `service_host`, `expiration_status`.
- [Record Data Fields](mfa-bypass-monitoring-data-fields) - every field inside a record.

> [!NOTE]
> The MFA Bypass Monitoring API requires its own permission and credits on your account - contact sales@webz.io for access.