---
title: "Mfa Self Recovery Request"
method: POST
path: "/api/auth/mfa/recovery/request"
tags: ["Authentication"]
---

# Mfa Self Recovery Request

`POST /api/auth/mfa/recovery/request`

## Request

- Base URL: `https://app.getdot.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://app.getdot.ai/api/auth/mfa/recovery/request`
- Auth: none declared

Start self-service MFA recovery and loudly notify the user + admins.

Legacy password users re-enter their password. Explicit magic-link users
have already proved their mailbox with the pending primary-factor token;
SSO and unclassified passwordless identities remain ineligible.

## Request body

- BodyMfaSelfRecoveryRequestApiAuthMfaRecoveryRequestPost
  - `mfa_token` string, required
  - `password` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/getdot/apis/dot-api-2.md) · [All operations](https://skmtc.dev/getdot/apis/dot-api-2/llms.txt) · [OpenAPI document](https://skmtc.dev/getdot/apis/dot-api-2/revisions/d26fe7163a7f?raw)