Setup MFA (TOTP)

post

https://staging.ankatech.co/api/v3/admin/mfa/setup

Initialize TOTP-based MFA for the authenticated user.
Returns the TOTP secret, otpauth:// QR-code data, and one-time backup codes for enrollment.
The TOTP secret is envelope-encrypted under the tenant HSM KEK (AES-GCM) before persistence.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Responses

Language

Credentials

Bearer

JWT

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

application/problem+json

200MFA enrollment material generated. The body carries the one-shot TOTP secret in plaintext (transcribe into an authenticator app), the otpauth:// QR-code payload, and the backup codes. The response is marked Cache-Control: no-store and MUST NOT be cached.

401Unauthenticated — missing or invalid JWT bearer token.