---
title: "TBP-775 — checks a sign-in code against its server-side challenge (expiry, attempt limit, single use)."
method: POST
path: "/account/internal/oauth2/verifyMfaCode"
tags: ["internal"]
---

# TBP-775 — checks a sign-in code against its server-side challenge (expiry, attempt limit, single use).

`POST /account/internal/oauth2/verifyMfaCode`

## Request

- Base URL: `https://api.thebridge.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://api.thebridge.dev/account/internal/oauth2/verifyMfaCode`
- Auth: none declared

## Response `200`

---

[API](https://skmtc.dev/thebridge/apis/bridge-api.md) · [All operations](https://skmtc.dev/thebridge/apis/bridge-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thebridge/apis/bridge-api/revisions/290fffcb3d80?raw)