---
title: "Get the unused TOTP recovery-code count after reauthentication"
method: POST
path: "/auth/security/totp/recovery-codes/status"
tags: ["Auth"]
---

# Get the unused TOTP recovery-code count after reauthentication

`POST /auth/security/totp/recovery-codes/status`

## Request

- Base URL: `https://app.openpo.st/api/v1`
- URL: `https://app.openpo.st/api/v1/auth/security/totp/recovery-codes/status`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `openpost_session`

## Request body

- RecoveryCodeSensitiveActionInputBody
  - `$schema` string, uri: A URL to the JSON Schema for this object.
  - `current_password` string, required: Current password for re-authentication
  - `reauth_grant` string: One-time action-bound reauthentication grant

## Response `200`

OK

- RecoveryCodeStatusOutputBody
  - `$schema` string, uri: A URL to the JSON Schema for this object.
  - `remaining` integer, required: Number of unused active MFA recovery codes

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `409`: Conflict
- `422`: Unprocessable Entity
- `429`: Too Many Requests
- `500`: Internal Server Error

---

[API](https://skmtc.dev/openpo/apis/openpost-api.md) · [All operations](https://skmtc.dev/openpo/apis/openpost-api/llms.txt) · [OpenAPI document](https://skmtc.dev/openpo/apis/openpost-api/revisions/67d3964458a7?raw)