Skip to main content
POST
Error

Authorizations

Authorization
string
header
required

A staff session token, uk_st_…. Minted by sign-up, sign-in or the two-factor exchange.

Response

Scan or type it.

secret
string

Base32, shown once — what someone types when they cannot scan.

otpauth_url
string
qr_data_uri
string

A PNG as a data URI.