---
title: "MFA sign in"
method: POST
path: "/auth/mfa/sign-in"
tags: ["OTP"]
---

# MFA sign in

`POST /auth/mfa/sign-in`

Complete multi-factor authorization to sign in, with a TOTP and an MFA attempt code

## Request body

- object
  - `type` 'totp', required
  - `totp` string, required
  - `code` string, required — A 45 character code

## Response `200`

Successful response

- object
  - `refresh_token` string, required — Long-lived refresh token that can be used to obtain a new access token
  - `access_token` string, required — Short-lived access token that can be used to authenticate the user
  - `is_new_user` boolean, required — Whether the user is a new user
  - `user_id` string, required — The unique identifier of the user

---

[API](https://skmtc.net/hexclave/apis/hexclave-rest-api-3.md) · [All operations](https://skmtc.net/hexclave/apis/hexclave-rest-api-3/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/hexclave/hexclave-rest-api-3/versions/690014f63028/schema)