---
title: "POST /user/security/mfa/step-up-tokens/start"
method: POST
path: "/user/security/mfa/step-up-tokens/start"
tags: ["api"]
---

# POST /user/security/mfa/step-up-tokens/start

`POST /user/security/mfa/step-up-tokens/start`

## Request

- Base URL: `http://api.revelator.com`
- URL: `http://api.revelator.com/user/security/mfa/step-up-tokens/start`
- Auth: none declared

## Request body

- StartStepUpTokenRequestDTO
  - `method` string
  - `methodId` string
  - `scope` string

## Response `200`

OK

- StepUpTokenResponseDTO
  - `stepUpTokenId` string, uuid
  - `verified` boolean
  - `expiresAt` string, date-time

## Changes

- **2026-08-10** `14692bd9d2cf`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/revelator/apis/revelator-api/changes/user/security/mfa/step-up-tokens/start/post.md)

---

[API](https://skmtc.dev/revelator/apis/revelator-api.md) - [All operations](https://skmtc.dev/revelator/apis/revelator-api/llms.txt) - [OpenAPI document](https://skmtc.dev/revelator/apis/revelator-api/revisions/58619862ce83?raw)