Verify a second factor
Checks an authenticator code or a recovery code for your account and records the verification time (lastTwoFAVerifiedAt). A recovery code can only be used once. If two-factor authentication isn’t enabled, the request succeeds without checking anything.
Authorizations
Send your API token as Authorization: Bearer <api-token>. Tokens expire (30 days by default) and stop working when you change or reset your password.
Body
Which second factor you're sending. Required when two-factor authentication is enabled on the account.
totp, recoveryCode 6-digit code from your authenticator app. Required when twoFAType is totp.
6One of your 10-character recovery codes. Required when twoFAType is recoveryCode.
10Response
Verified. The response body is empty.
