Manual
Overview Getting Started Core concepts Quick Start Guide Create an account and sign in Projects Create and manage projects Project settings Languages Workflow and translation lock Translation Keys Key names and groups ICU messages and placeholders Translating The translation editor Keyboard shortcuts Machine translation Review & Reports Review workflow Reports Branches & Merging Branch workflows: create, merge, and delete The Branches page Tags Translation Memory How translation memory works Glossary The glossary Import & Export Import and export files File formats Integrations GitHub GitLab Slack, Mattermost and Microsoft Teams Repository and API keys Tags from Git tags Webhooks Teams & Access Roles and permissions Teams Inviting people Project access Account & Organization Account settings Organization settings Billing & Plans Plans and limits
CLI
Overview Installation Set up a project Configuration File formats Use the CLI in CI Commands ct push ct pull ct status ct translate ct check ct merge ct tag ct init ct snippet
API
Overview Introduction Authentication Languages and time zones Rate limiting Errors Endpoints Authentication routes Account Organisation Teams Projects Project languages Project members and teams Project webhooks Project API keys Branches Tags Keys Translations and review CLI and CI Translation memory Glossary GitHub GitLab Repository link Guides Pull translations for your build MCP server for AI agents
Log in Get started free
Account

Start two-factor setup

Makes a new secret for an authenticator app. It counts once you confirm a code.

1 min read ยท Updated October 2026

Makes a new secret for an authenticator app. It counts once you confirm a code.

HTTP 
POST /account/mfa/setup

Access: Session token only. API keys get 403 with insufficient_scope.

Calling it again before you confirm replaces the secret.

Response 200 #

JSON 
{
  "secret": "JBSWY3DPEHPK3PXPJBSWY3DPEHPK3PXP",
  "uri": "otpauth://totp/Continuous%20Translations%3Aada%40example.com?secret=JBSWY3DPEHPK3PXPJBSWY3DPEHPK3PXP&issuer=Continuous%20Translations&algorithm=SHA1&digits=6&period=30"
}

Response fields #

FieldTypeDescription
secretstringThe key to type into an authenticator app, in base32.
uristringAn otpauth:// URI with the same key. Show it as a QR code. The codes have 6 digits and last 30 seconds (SHA-1).

Errors #

StatuserrorWhen
401unauthenticatedThe token is missing or not valid.
409mfa_enabledTwo-factor authentication is on already.
429rate_limitedToo many requests, see Rate limiting.

See Errors for the error format.