Skip to main content
POST
cURL

Headers

X-CSRF-Token
string
required

Echoes the token from the current session. Required on every unsafe method.

Response

200 - application/json

Enrolment started

secret
string
required

Base32 shared secret, returned only during enrolment.

uri
string
required

otpauth:// URI for an authenticator app.