# Create an MFA verification for a user **POST /api/users/{userId}/mfa-verifications** Create a new MFA verification for a given user ID. ## Servers - Logto endpoint address.: https://[tenant_id].logto.app (Logto endpoint address.) ## Authentication methods - O auth2 ## Parameters #### Path parameters - **userId** (string) The unique identifier of the user. ## Body parameters Content-type: application/json - **type** (string("Totp")) - **secret** (string) ## Responses ### 200: The MFA verification that was created. #### Body Parameters: application/json (object) - **type** (string("Totp")) - **secret** (string) - **secretQrCode** (string) ### 400: Bad Request ### 401: Unauthorized ### 403: Forbidden ### 404: Not Found ### 422: Unprocessable Content [Powered by Bump.sh](https://bump.sh)