---
title: "Confirm TOTP registration"
method: POST
path: "/accounts/confirm-totp-registration"
tags: ["Multi-Factor Authentication"]
---

# Confirm TOTP registration

`POST /accounts/confirm-totp-registration`

## Request

- Base URL: `https://api.quiva.ai`
- URL: `https://api.quiva.ai/accounts/confirm-totp-registration`
- Auth: one of:
  - HTTP bearer
  - API key in header `x-api-key`

Confirms a TOTP registration by validating a code

## Request body

- object
  - `code` string, required: TOTP code
  - `secret` string, required: TOTP secret key

## Response `200`

TOTP registration confirmed successfully

- object
  - `data` object, required
    - `recovery_codes` string[]

## Other responses

- `400`: Bad request
- `401`: Unauthorized

## Changes

- **2025-06-12** `4979dfd00eda`: 1 warning, 1 info
  - removed the optional property `recovery_codes` from the response with the `200` status
  - added the required property `data` to the response with the `200` status

[Operation history](https://skmtc.dev/quivaworks/apis/quiva-ai-gateway/changes/accounts/confirm-totp-registration/post.md)

---

[API](https://skmtc.dev/quivaworks/apis/quiva-ai-gateway.md) - [All operations](https://skmtc.dev/quivaworks/apis/quiva-ai-gateway/llms.txt) - [OpenAPI document](https://skmtc.dev/quivaworks/apis/quiva-ai-gateway/revisions/700eb1ace61a?raw)