---
title: "POST /user/totp/verify"
method: POST
path: "/user/totp/verify"
tags: ["users"]
---

# POST /user/totp/verify

`POST /user/totp/verify`

Verify a one time password for MFA

## Cookies

- `__session` string

## Request body

- object
  - `otp` string, required

## Response `201`

Multifactor authentication is complete.

- object
  - `custom_token` string, required — Token to exchange for ID token

## Other responses

- `400` — Bad request
- `401` — Requires authentication
- `403` — Forbidden
- `404` — Resource not found
- `405` — Method not allowed
- `422` — UnprocessableEntity
- `429` — Too Many Requests
- `500` — Internal Error

---

[API](https://skmtc.dev/cloudquery/apis/cloudquery-openapi-spec.md) · [All operations](https://skmtc.dev/cloudquery/apis/cloudquery-openapi-spec/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/cloudquery/cloudquery-openapi-spec/revisions/ef9782a3ed5e/schema)