Activity and account

Start setting up an authenticator app

Returns a new secret and an otpauth:// URL you can turn into a QR code. The secret is held for you server-side for 10 minutes; finish with /api/account/2fa/enable. Calling this again starts over with a new secret, which is why a read-only key cannot call it.

This is a write: a read-only API key is refused with 403.

get/api/account/2fa/setup

Request

  • Base URL: https://eyalsec.com
  • URL: https://eyalsec.com/api/account/2fa/setup
  • Auth: one of:
    • API key in header X-API-Key
    • API key in cookie __Host-es2session

Response

OK.

object required

Changes

No recorded changes to this operation across all 1 revision of this API.