mfa

Confirm TOTP enrollment with a code

Activates two-factor auth and returns the recovery codes.

post/mfa/setup/confirm

Request

  • The document declares no server URL.
  • Auth: none declared

Request body

codestring required

A 6-digit TOTP code from the authenticator app, or a single-use recovery code (XXXXX-XXXXX).

Example request

{
  "code": "123456"
}

Response

recoveryCodesstring[] required

Single-use recovery codes. Shown exactly once — the user must store them before continuing.

Example response

{
  "recoveryCodes": [
    "A1B2C-D3E4F",
    "G5H6J-K7M8N"
  ]
}

Changes

No recorded changes to this operation across all 51 revisions of this API.