Skip to main content

POST /v1/me/2fa/setup

POST 

/v1/me/2fa/setup

Initiate 2FA setup. Persists an encrypted secret and 10 hashed backup codes; user must verify with /me/2fa/verify-setup before 2FA is actually enabled.

Responses

Default Response

Response Headers
    X-Request-Id

    ULID stamped on every response and propagated through error envelopes. Use it when filing support tickets — it identifies the exact request in the structured logs (requestId field).

    X-RateLimit-Limit

    Requests-per-second ceiling for the current bucket (per-organization for authenticated calls, per-IP for public ones).

    X-RateLimit-Remaining

    Tokens left in the bucket after this request.

    X-RateLimit-Reset

    ISO-8601 timestamp when the bucket will be fully refilled.