Enable Mfa

POST /auth/mfa/enable

Role floor

Requires viewer or above. The floor is a minimum, not a grant: scope filtering still applies on top of it, and a resource in another tenant answers 404 rather than 403.

Request body — MfaCodeRequest

Field	Type		Notes
code	string	required	min length 6 max length 32

Responses

Status	Description	Body
200	Successful Response	RecoveryCodes
422	Validation Error	HTTPValidationError

Only the success paths are declared

Any operation may also answer any status in the error catalogue, and every failure body is the platform envelope — including the 422 this document types as HTTPValidationError.

Example

The body shows the fields the schema always carries. Which combination is legal is a service rule the schema cannot express, so read the description above before copying this.

curl -X POST https://your-deployment.example.com/auth/mfa/enable \
  -H "Authorization: Bearer $COBRE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
       "code": "string"
     }'

Response — RecoveryCodes

Field	Type		Notes
codes	string[]	required	—