---
title: "Mfa Setup"
method: POST
path: "/v1/auth/mfa/setup"
tags: ["auth"]
---

# Mfa Setup

`POST /v1/auth/mfa/setup`

## Request

- Base URL: `https://api.claims.zicron.ai`
- URL: `https://api.claims.zicron.ai/v1/auth/mfa/setup`
- Auth: none declared

Generate a new TOTP secret for the current user.

Returns the secret and a provisioning URI for QR code display.
The user must call /mfa/verify with a valid code to actually enable MFA.

## Response `200`

Successful Response

- MfaSetupResponse
  - `secret` string, required
  - `provisioning_uri` string, required
  - `backup_codes` string[]

---

[API](https://skmtc.dev/zicron/apis/zicron-api.md) · [All operations](https://skmtc.dev/zicron/apis/zicron-api/llms.txt) · [OpenAPI document](https://skmtc.dev/zicron/apis/zicron-api/revisions/abe62e22aa46?raw)