---
title: "Removes the MFA provider and secret, disabling MFA login."
method: POST
path: "/users/auth/mfa/forceDisable"
tags: ["users.auth.mfa"]
---

# Removes the MFA provider and secret, disabling MFA login.

`POST /users/auth/mfa/forceDisable`

COMPANY_OWNER and COMPANY_ADMIN users only
Requires the privilege [`COMPANY_USERS_WRITE`](https://www.gremlin.com/docs/user-management/access-control/#privileges)

## Response `default`

default response

## Other responses

- `401` — Authorization header missing or malformed. Please provide proper credentials in the authorization header.
- `403` — User requires privilege: COMPANY_USERS_WRITE

---

[API](https://skmtc.net/gremlin/apis/gremlin-api.md) · [All operations](https://skmtc.net/gremlin/apis/gremlin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gremlin/gremlin-api/revisions/36ee938323f0/schema)