Disable 2FA — requires a TOTP or backup code

DELETE

/api/v1/auth/2fa

Authorization

bearer

code*string

Example Request

curl -X DELETE 'http://localhost:3001/api/v1/auth/2fa?code=string'

Example Request

curl -X DELETE 'http://localhost:3001/api/v1/auth/2fa?code=string'

Example Response200

Empty

Revoke an API key POST

Activate 2FA — verify first code, get backup codes POST

Verifies the first TOTP code and activates 2FA. Returns 10 single-use backup codes — shown ONCE, store them securely.