Authentication

Disable MFA

Requires a valid TOTP or recovery code in the body, or a passkey re-auth token in X-Auth-Confirm (purpose security.mfa.disable). Account password alone is not accepted while TOTP is enabled.

delete/v1/auth/mfa

Request

  • Base URL: https://api.1claw.co
  • URL: https://api.1claw.co/v1/auth/mfa
  • Auth: HTTP bearer

Headers

X-Auth-Confirmstring

Passkey or TOTP re-auth token (rat_)

Request body

codestring

TOTP or recovery code

passwordstring

Deprecated. Password is no longer sufficient to disable MFA.

Response

MFA disabled

Changes

No recorded changes to this operation across all 1 revision of this API.