Authentication

Mfa Disable

Disable MFA. Requires both the user's password AND a valid TOTP code (or recovery code) — disabling MFA is itself a high-trust action.

SSO-only users (no password set) need only supply the code; the active session is the first factor for them. password is therefore optional at the schema level and only verified when the user record actually has a hashed_password.

post/api/auth/mfa/disable

Request

  • Base URL: https://app.getdot.ai (the document declares no server; this is the origin it was published from)
  • URL: https://app.getdot.ai/api/auth/mfa/disable
  • Auth: one of:
    • API key in header X-API-KEY
    • API key in cookie Authorization
    • OAuth 2 (password, token URL /api/auth/token)

Request body

codestring required
passwordstring nullable

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.