---
title: "Verify MFA Challenge"
method: POST
path: "/v1/login/mfa/verify"
tags: ["MFA API"]
---

# Verify MFA Challenge

`POST /v1/login/mfa/verify`

Use this endpoint to complete the MFA verification step during login. After receiving an `mfaToken` from the access token endpoint, submit the verification code along with the token to receive your access credentials.

You must provide either a `passcode` (from your authenticator app, email, or SMS) or a `recoveryCode` — not both.

## Request body

- MFAVerifyInput — Information required to verify an MFA passcode during setup.
  - `passcode` string, required — The OTP passcode to verify.
  - `secret` string — The TOTP secret (required for app-based MFA).
  - `mfaType` 'app' | 'email' | 'sms', required — The type of MFA being verified.
  - `countryCode` string — ISO 3166-1 alpha-2 country code (e.g. "BR", "US"). Used to resolve the phone number for SMS MFA. Not a dial prefix (+55).

## Response `200`

MFA verification succeeded. Returns the access credentials for the authenticated session.

- OAuth2Token — Information used to manage OAuth2 authentication data. It securely stores access credentials, ensuring seamless authorization and control over protected resources.
  - `accessToken` string, required — A temporary token that grants the user secure access the APIs.
  - `expiresIn` integer, required — The time (in seconds) until the token expires.
  - `idToken` string — The identity details about the authenticated user in OpenID Connect standards. It can be used to verify user authentication.
  - `refreshToken` string, required — A long-lived token that allows users to obtain a new `access_token` without requiring them to log in again.
  - `scope` string — The level of access granted to the issued tokens
  - `tokenType` string, required — The type of token issued.

## Other responses

- `400`
- `401`
- `429`
- `500`

---

[API](https://skmtc.net/lerian/apis/identity-plugin.md) · [All operations](https://skmtc.net/lerian/apis/identity-plugin/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lerian/identity-plugin/versions/25daba385532/schema)