PApaymongo
TOTP

Remove the caller's authenticator (TOTP)

Disables authenticator-app MFA for the caller by deleting the enrolled secret. Requires the account password in the request body as confirmation — there is no OTP step-up on this route, so the password is what stops a hijacked session from silently stripping MFA. No TOTP code is required, so a user who lost their device can still remove it. Idempotent once the password checks out — returns 204 whether or not an authenticator was enrolled.

delete/v1/totp

Request

  • Base URL
    https://identity-api.paymongo.com
  • URL
    https://identity-api.paymongo.com/v1/totp
  • Auth
    HTTP bearer

Request body

Example request

{
  "data": {
    "attributes": {
      "current_password": "Str0ng!Password"
    }
  }
}

Response

No Content

Changes

No recorded changes to this operation across all 1 revision of this API.