Generate TOTP secret for setup

POST https://app.speybooks.com/api/v1/auth/totp/setup

Generate a TOTP secret and OTP auth URI for QR code display. The secret is stored but not yet active — the user must verify a code via the enable endpoint to activate TOTP.

Response

200 Returns the TOTP secret and otpauth URL for QR code generation. Call /totp/enable with a valid code to activate.

Show response fields

otpauth string

secret string

Error codes

400 TOTP is already enabled for this user.

Request POST /v1/auth/totp/setup curl

curl -X POST https://api.speybooks.com/v1/auth/totp/setup \
  -H "Authorization: Bearer sk_test_..."

Response 200

{
  "success": true,
  "data": {
    "secret": "JBSWY3DPEHPK3PXP",
    "otpauth": "otpauth://totp/SpeyTech%20Accounting:..."
  }
}