---
title: "POST /api/ee/mfa/enroll"
method: POST
path: "/api/ee/mfa/enroll"
tags: ["/api/ee/mfa"]
---

# POST /api/ee/mfa/enroll

`POST /api/ee/mfa/enroll`

## Request

- Base URL: `` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/api/ee/mfa/enroll`
- Auth: API key in header `X-API-Key`

Start TOTP enrollment for the current user. Requires the account password (LDAP users re-bind
  against the directory) and the `:multi-factor-auth` feature. Returns the Base32 `secret` and an
  `otpauth_uri` for QR display; enrollment is not active until confirmed with a live code.

## Request body

- object
  - `password` string, required: value must be a non-blank string.

## Response `2XX`

Successful response

- object
  - `otpauth_uri` string, required: value must be a non-blank string.
  - `secret` string, required: value must be a non-blank string.

## Other responses

- `4XX`: Client error response
- `5XX`: Server error response

## Changes

- **2026-11-04** `2e178f5a7934`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/metabase/apis/metabase-api/changes/api/ee/mfa/enroll/post.md)

---

[API](https://skmtc.dev/metabase/apis/metabase-api.md) - [All operations](https://skmtc.dev/metabase/apis/metabase-api/llms.txt) - [OpenAPI document](https://skmtc.dev/metabase/apis/metabase-api/revisions/2e178f5a7934?raw)