MFA enabled

Fired when a user enables multi-factor authentication.

postWebhookmfa.enabled

Payload

method'sms' | 'totp' | 'passkey' required

The MFA method that was enabled.

type'mfa.enabled' required

The type of webhook event.

user_idstring required

The ID of the user who enabled MFA.

Return a 200 status to indicate that the webhook was received successfully.

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.