---
title: "POST /v2/admin-auth/mfa-sessions"
method: POST
path: "/v2/admin-auth/mfa-sessions"
tags: ["Admin authentication"]
---

# POST /v2/admin-auth/mfa-sessions

`POST /v2/admin-auth/mfa-sessions`

## Request

- Base URL: `https://api.arbital.xyz` (the document declares no server; this is the origin it was published from)
- URL: `https://api.arbital.xyz/v2/admin-auth/mfa-sessions`
- Auth: none declared

## Request body

- object
  - `challenge_id` string, uuid, required
  - `code` string, required
  - `mfa_ticket` string, required

## Response `201`

Opaque, revocable administrator session

- object
  - `expires_at_unix` integer, required
  - `session_token` string, required

## Other responses

- `400`: Stable machine-readable problem. HTTP 429 and 503 responses include retry and cache-validity fields plus Retry-After and X-Request-ID headers.
- `401`: Stable machine-readable problem. HTTP 429 and 503 responses include retry and cache-validity fields plus Retry-After and X-Request-ID headers.
- `503`: Stable machine-readable problem. HTTP 429 and 503 responses include retry and cache-validity fields plus Retry-After and X-Request-ID headers.

---

[API](https://skmtc.dev/arbital/apis/arbital-api.md) - [All operations](https://skmtc.dev/arbital/apis/arbital-api/llms.txt) - [OpenAPI document](https://skmtc.dev/arbital/apis/arbital-api/revisions/bb0185edf43a?raw)