ApiAuth
Start 2FA setup — returns secret + QR code
POST
Generates a pending TOTP secret. 2FA is NOT active until enable verifies the first code. Fails if 2FA is already enabled (disable first).
bearerX-API-Version?stringAPI version for header-based versioning
Default
"1"Value in
"1""2"Setup material
curl -X POST 'http://localhost:3001/api/v1/auth/2fa/setup'Example Response200
Empty