Skip to main content
POST
Error

Authorizations

Authorization
string
header
required

A staff session token, uk_st_…. Minted by sign-up, sign-in or the two-factor exchange. Only a 401 means it is spent; not_a_member (403) is about the organization named in X-Organization-Id and leaves the token good for the others.

Body

application/json
code
string
required

Response

Enabled, with the recovery codes.

totp_enabled
boolean
recovery_codes
string[]