Skip to main content
POST
Error

Authorizations

Authorization
string
header
required

A staff session token, uk_st_…. Minted by sign-up, sign-in or the two-factor exchange.

Response

The secret to scan or type.

secret
string

Plaintext, shown once — what someone types when they cannot scan.

otpauth_url
string
qr_data_uri
string

A PNG data URI.