---
title: "Retrieve one-time use recovery codes."
method: GET
path: "/mf-recovery-codes"
---

# Retrieve one-time use recovery codes.

`GET /mf-recovery-codes`

If a user has two-factor authentication enabled, they can generate and use a recovery code if they lose or otherwise can't use their second factor device.

## Path parameters

- `show_codes` string

## Response `200`

Multi-factor recovery code form

- object
  - `meta` object, required
    - `code` integer, required — Http status code
  - `response` object, required
    - `csrf_token` string — Session CSRF token
    - `recovery_codes` string[] — A list of codes

## Changes

- **2024-05-19** `b2c59e839c03` — 1 breaking
  - added the new path request parameter `show_codes`
- **2022-06-18** `2f80547852cc` — 1 info
  - endpoint added
- **2019-07-23** `11c8459a5c04` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/pallets-eco/apis/flask-security-external-api/changes/mf-recovery-codes/get.md)

---

[API](https://skmtc.dev/pallets-eco/apis/flask-security-external-api.md) · [All operations](https://skmtc.dev/pallets-eco/apis/flask-security-external-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/pallets-eco/flask-security-external-api/revisions/ff401900ea7a/schema)