---
title: "For a completed MFA enrollment view the current recovery codes"
method: GET
path: "/current-identity/mfa/recovery-codes"
tags: ["Current Identity", "MFA"]
---

# For a completed MFA enrollment view the current recovery codes

`GET /current-identity/mfa/recovery-codes`

## Request

- Base URL: `https://demo.ziti.dev/edge/client/v1`
- URL: `https://demo.ziti.dev/edge/client/v1/current-identity/mfa/recovery-codes`
- Auth: one of:
  - API key in header `zt-session`
  - OAuth 2
    - Authorization code: `/oidc/authorize`
    - Token URL: `/oidc/token` scopes: `openid`
- TypeScript: <https://skmtc.dev/openziti/apis/ziti-edge-client/docs/current-identity/mfa/recovery-codes/get.ts> (a function with typed inputs; its response is checked against the schema)

Allows the viewing of recovery codes of an MFA enrollment. Requires a current valid time based one time password to interact with. Available after a completed MFA enrollment.

## Headers

- `mfa-validation-code` string

## Request body

- MfaCode
  - `code` string, required

## Response `200`

The recovery codes of an MFA enrollment

- DetailMfaRecoveryCodesEnvelope
  - `data` DetailMfaRecoveryCodes, required: Fields shared by all Edge API entities
    - `_links` object, required: A map of named links
    - `createdAt` string, date-time, required
    - `id` string, required
    - `tags` Tags
    - `updatedAt` string, date-time, required
    - `recoveryCodes` string[], required
  - `meta` Meta, required
    - `apiEnrollmentVersion` string
    - `apiVersion` string
    - `filterableFields` string[]
    - `pagination` Pagination
      - `limit` number, required
      - `offset` number, required
      - `totalCount` number, required

## Other responses

- `401`: The supplied session does not have the correct access rights to request this resource
- `404`: The requested resource does not exist

## Changes

- **2026-10-14** `f7b51eaafbbb`: 1 breaking
  - the response property `data/allOf[#/components/schemas/baseEntity]/tags` became nullable for the status `200`
- **2024-06-07** `26670d8bbc37`: 1 breaking, 1 info
  - the `data` response's property type changed from `object` to no type for status `200`
  - added `#/components/schemas/baseEntity, subschema #2` to the `data` response property `allOf` list for the response status `200`
- **2024-05-29** `cce2800c1357`: 1 breaking, 3 warning, 1 info
  - the `data` response's property type changed from no type to `object` for status `200`
  - the optional response header `WWW-Authenticate` removed for the status `200`
  - the optional response header `WWW-Authenticate` removed for the status `401`
  - the optional response header `WWW-Authenticate` removed for the status `404`
  - …1 more

[Operation history](https://skmtc.dev/openziti/apis/ziti-edge-client/changes/current-identity/mfa/recovery-codes/get.md)

---

[API](https://skmtc.dev/openziti/apis/ziti-edge-client.md) - [All operations](https://skmtc.dev/openziti/apis/ziti-edge-client/llms.txt) - [OpenAPI document](https://skmtc.dev/openziti/apis/ziti-edge-client/revisions/f7b51eaafbbb?raw)