---
title: "Verify MFA recovery code"
method: POST
path: "/api/auth/mfa/recovery-code/verify"
tags: ["Auth"]
---

# Verify MFA recovery code

`POST /api/auth/mfa/recovery-code/verify`

## Request

- Base URL: `https://demo.hitkeep.com`
- URL: `https://demo.hitkeep.com/api/auth/mfa/recovery-code/verify`
- Auth: none declared

Consumes a recovery code for a pending MFA challenge.

## Request body

- object
  - `challenge_token` string, uuid, required
  - `code` string, required

## Response `200`

Status

- Status
  - `message` string
  - `status` string

---

[API](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api.md) · [All operations](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/revisions/bb2df36ab2a4?raw)