---
title: "POST /user/security/mfa/step-up-tokens/{tokenId}/verify"
method: POST
path: "/user/security/mfa/step-up-tokens/{tokenId}/verify"
tags: ["api"]
---

# POST /user/security/mfa/step-up-tokens/{tokenId}/verify

`POST /user/security/mfa/step-up-tokens/{tokenId}/verify`

## Request

- Base URL: `http://api.revelator.com`
- URL: `http://api.revelator.com/user/security/mfa/step-up-tokens/{tokenId}/verify`
- Auth: none declared

## Path parameters

- `tokenId` string, required
- `tokenId` string, required

## Request body

- VerifyStepUpTokenRequestDTO
  - `code` string

## Response `200`

OK

- StepUpTokenResponseDTO
  - `stepUpTokenId` string, uuid
  - `verified` boolean
  - `expiresAt` string, date-time

## Changes

- **2026-11-01** `58619862ce83`: 1 breaking, 1 warning
  - added the new path request parameter `tokenId`
  - deleted the `path` request parameter `tokenId`
- **2026-11-01** `baafa7ca59e1`: 1 breaking, 1 warning
  - added the new path request parameter `tokenId`
  - deleted the `path` request parameter `tokenId`
- **2026-11-01** `717c07d382a8`: 1 breaking, 1 warning
  - added the new path request parameter `tokenId`
  - deleted the `path` request parameter `tokenId`
- **2026-11-01** `01ef826eb485`: 1 breaking, 1 warning
  - added the new path request parameter `tokenId`
  - deleted the `path` request parameter `tokenId`
- **2026-11-01** `965dc31c2ddd`: 1 breaking, 1 warning
  - added the new path request parameter `tokenId`
  - deleted the `path` request parameter `tokenId`

[Operation history](https://skmtc.dev/revelator/apis/revelator-api/changes/user/security/mfa/step-up-tokens/:tokenId/verify/post.md)

---

[API](https://skmtc.dev/revelator/apis/revelator-api.md) - [All operations](https://skmtc.dev/revelator/apis/revelator-api/llms.txt) - [OpenAPI document](https://skmtc.dev/revelator/apis/revelator-api/revisions/58619862ce83?raw)