Turns two-factor authentication off. Needs your password and a code.
HTTP
DELETE /account/mfaAccess: Session token only. API keys get 403 with insufficient_scope.
Request body #
JSON.
| Field | Type | Required | Description |
|---|---|---|---|
password | string | yes | Your password. |
code | string | yes | A code from the app, or a recovery code. It is used up. |
Response 204 #
Two-factor authentication is off and the recovery codes are gone. There is no body.
Errors #
| Status | error | When |
|---|---|---|
| 401 | unauthenticated | The token is missing or not valid. |
| 403 | wrong_password | password is not your password. |
| 409 | mfa_required_by_organization | The organisation requires two-factor authentication. |
| 422 | invalid_request | code is invalid. |
| 429 | rate_limited | Too many requests, see Rate limiting. |
See Errors for the error format.