Verify and enable TOTP

POST https://app.speybooks.com/api/v1/auth/totp/enable

Verify a TOTP code and activate two-factor authentication. Requires a valid code from the secret generated during setup. Once enabled, all future logins will require TOTP verification.

Body parameters

token string required

Six-digit TOTP code from the authenticator app to verify setup.

min length: 6 · max length: 6

Response

200 TOTP enabled. Future logins will require a TOTP code.

Error codes

400 No pending secret (run /totp/setup first), TOTP already enabled, or invalid code.

Request POST /v1/auth/totp/enable curl

curl -X POST https://api.speybooks.com/v1/auth/totp/enable \
  -H "Authorization: Bearer sk_test_..." \
  -H "Content-Type: application/json" \
  -d '{"token": "123456"}'

Response 200

{
  "success": true
}