---
title: "Set Org Mfa"
method: POST
path: "/api/set_org_mfa"
tags: ["Admin"]
---

# Set Org Mfa

`POST /api/set_org_mfa`

## Request

- Base URL: `https://app.getdot.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://app.getdot.ai/api/set_org_mfa`
- Auth: one of:
  - API key in header `X-API-KEY`
  - API key in cookie `Authorization`
  - OAuth 2 (password, token URL `/api/auth/token`)

Update org-level MFA enforcement settings. All fields are optional —
only the keys present in the body are updated. Workspaces inherit from
their parent org (set on the parent and they apply to children).

Audit-logged so admins can see exactly when enforcement was tightened.

## Request body

- BodySetOrgMfaApiSetOrgMfaPost
  - `mfa_required` boolean, nullable
  - `mfa_required_for_admins` boolean, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/getdot/apis/dot-api-2.md) · [All operations](https://skmtc.dev/getdot/apis/dot-api-2/llms.txt) · [OpenAPI document](https://skmtc.dev/getdot/apis/dot-api-2/revisions/d26fe7163a7f?raw)