---
title: "POST /v1/users/me/mfa/confirm — verify setup and return recovery codes."
method: POST
path: "/v1/users/me/mfa/confirm"
tags: ["users"]
---

# POST /v1/users/me/mfa/confirm — verify setup and return recovery codes.

`POST /v1/users/me/mfa/confirm`

## Request body

- MfaConfirmRequest — Request body for confirming MFA setup with a TOTP code.
  - `code` string, required

## Response `200`

MFA enabled

- RecoveryCodesResponse — Response containing a fresh set of recovery codes.
  - `recovery_codes` string[], required

## Other responses

- `400` — Invalid code or missing setup
- `401` — Unauthorized

---

[API](https://skmtc.dev/microsandbox/apis/microsandbox-api.md) · [All operations](https://skmtc.dev/microsandbox/apis/microsandbox-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/microsandbox/microsandbox-api/revisions/23f2a45cb09b/schema)