---
title: "Verify MFA verification code"
method: POST
path: "/api/experience/verification/mfa-verification-code/verify"
tags: ["Experience"]
---

# Verify MFA verification code

`POST /api/experience/verification/mfa-verification-code/verify`

Verify the provided MFA verification code. The verification code must have been sent using the MFA verification code endpoint. This endpoint verifies the code against the user's bound identifier and marks the verification as complete if successful.

## Request body

- object
  - `verificationId` string, required — The verification ID returned from the MFA verification code send endpoint.
  - `code` string, required — The verification code received by the user.
  - `identifierType` 'email' | 'phone' | 'Email' | 'Phone', required — The type of identifier used for MFA verification. Must match the type used when sending the verification code.

## Response `200`

The MFA verification code was successfully verified.

- object
  - `verificationId` string, required — The unique ID of the verification record. This can be used for subsequent MFA operations.

## Other responses

- `400` — Bad request. The verification code is invalid, expired, or the user is not identified.
- `404` — Verification record not found.
- `501` — The connector for the verification method is not configured.

---

[API](https://skmtc.net/logto/apis/logto-api-references.md) · [All operations](https://skmtc.net/logto/apis/logto-api-references/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/logto/logto-api-references/revisions/a163dc77d842/schema)