MFA disabled

Fired when a user disables multi-factor authentication.

postWebhookmfa.disabled

Payload

method'sms' | 'totp' | 'passkey' required

The MFA method that was disabled.

type'mfa.disabled' required

The type of webhook event.

user_idstring required

The ID of the user who disabled MFA.

Return a 200 status to indicate that the webhook was received successfully.

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.