---
title: "Fetch user OTP secret"
method: POST
path: "/user/2fa/otp_secret"
tags: ["Users"]
---

# Fetch user OTP secret

`POST /user/2fa/otp_secret`

Organization users will be able to access this endpoint only if their organization has sso flow disabled.

Requires additional `Basic` authorization. Check [Authentication section](#section/Setup/Authentication) for the details.

## Response `200`

OK

- object
  - `otp_secret` string — The OTP secret.
  - `uri` string, uri — The OTP provisioning url. Used as a source for QR code.

## Other responses

- `401` — Unauthorized
- `422` — Unprocessable Content

---

[API](https://skmtc.dev/kisi/apis/kisi-api.md) · [All operations](https://skmtc.dev/kisi/apis/kisi-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/kisi/kisi-api/revisions/998700ffff5a/schema)