Skip to Content
SeyloDocs
API referenceSign-in and account

Turn on the authenticator app

POST
/api/v1/auth.totpConfirm

Checks a code from the newly enrolled authenticator, turns 2FA on and returns 10 recovery codes. They are shown once; store them somewhere safe.

Any signed-in caller. Not available to MCP clients or the assistant.

Authorization

cookieseylo_session<token>

Request Body

application/json
  1. body
code*string
Match^[0-9]{6}$

Response Body

Success.

application/json
  1. response
recoveryCodes*array<string>
Example Request
curl -X POST 'https://example.com/api/v1/auth.totpConfirm' \  -H 'Content-Type: application/json' \  -d '{  "code": "string"}'
Example Response
{  "recoveryCodes": [    "string"  ]}

Get your sign-in methods GET

Returns how the signed-in person can sign in: password, authenticator app (TOTP), recovery codes left, passkeys and a linked GitHub login. Any signed-in caller. Not available to MCP clients or the assistant.

Turn off the authenticator app POST

Turns 2FA off and deletes the recovery codes. Needs a current authenticator code or an unused recovery code. Any signed-in caller. Not available to MCP clients or the assistant.