Agent Sandbox
Complete an MFA challenge
Second step for '+mfa@' accounts. Submit the challenge_token from the login response with the fixed test code '424242'. Any other 6-digit code returns 401 invalid_mfa_code with attempts_remaining. Deterministic: the same challenge_token always yields the same session token.
post/agent/v1/auth/mfa/verify
Request body
Example request
{
"code": "424242"
}Response
Session issued: { data: { session: { token, refresh_token, expires_at, expires_in, token_type, mfa_verified } } }