---
title: "Confirm TOTP enrollment"
method: POST
path: "/users/{user_id}/totp"
tags: ["MFA"]
---

# Confirm TOTP enrollment

`POST /users/{user_id}/totp`

Confirms the given TOTP enrollment.

## Request body

- object
  - `secret` string, required — The secret seed for the enrollment
  - `passcode` string, required — TOTP passcode for the enrollment

## Response `200`

OK

- object
  - `recovery_codes` string[] — A list of recovery codes for the MFA enrollment.

## Other responses

- `400` — Bad Request
- `403` — Forbidden
- `409` — Conflict

---

[API](https://skmtc.net/upsun/apis/upsun-com-rest-api.md) · [All operations](https://skmtc.net/upsun/apis/upsun-com-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/upsun/upsun-com-rest-api/revisions/6cc88fde6435/schema)