Core/Me
Enables TOTP 2FA on the caller's account.
Validates the first TOTP from the authenticator app, turns 2FA on, and returns 10 single-use recovery codes. Show the codes to the user once — the platform only stores their hashes. Lose them and call /me/mfa/recovery-codes.
post/api/v1/core/me/mfa/enable
Request body
Response
2FA enabled, recovery codes returned