Hevn Inc

Hevn Inc 2FA API

The 2FA API from Hevn Inc — 10 operation(s) for 2fa.

Documentation GitHub OpenAPI

Operations 10

GET /api/v1/user/2fa/status Get Totp Status #

POST /api/v1/user/2fa/setup Setup Totp #

POST /api/v1/user/2fa/activate Activate Totp #

DELETE /api/v1/user/2fa Disable Totp #

POST /api/v1/user/2fa/recovery-codes Regenerate Recovery Codes #

GET /api/v1/auth/user/2fa/status Get Totp Status Package Alias #

POST /api/v1/auth/user/2fa/setup Setup Totp Package Alias #

POST /api/v1/auth/user/2fa/activate Activate Totp Package Alias #

DELETE /api/v1/auth/user/2fa Disable Totp Package Alias #

POST /api/v1/auth/user/2fa/recovery-codes Regenerate Recovery Codes Package Alias #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/hevn-inc-2fa-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: HEVN 2 FA API
  description: Backend API for HEVN mobile neobank
  version: 0.1.2
servers:
- url: https://api.hevn.finance
  description: Production
tags:
- name: 2FA
paths:
  /api/v1/user/2fa/status:
    get:
      tags:
      - 2FA
      summary: Get Totp Status
      description: Check if 2FA is enabled for the current user.
      operationId: get_totp_status_api_v1_user_2fa_status_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TotpStatusResponse'
      security:
      - HTTPBearer: []
  /api/v1/user/2fa/setup:
    post:
      tags:
      - 2FA
      summary: Setup Totp
      description: Generate TOTP secret and provisioning URI for QR code.
      operationId: setup_totp_api_v1_user_2fa_setup_post
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TotpSetupResponse'
      security:
      - HTTPBearer: []
  /api/v1/user/2fa/activate:
    post:
      tags:
      - 2FA
      summary: Activate Totp
      description: Verify first TOTP code and activate 2FA. Returns recovery codes.
      operationId: activate_totp_api_v1_user_2fa_activate_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TotpVerifyRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TotpActivateResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
      - HTTPBearer: []
  /api/v1/user/2fa:
    delete:
      tags:
      - 2FA
      summary: Disable Totp
      description: Disable 2FA. Requires current TOTP code.
      operationId: disable_totp_api_v1_user_2fa_delete
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TotpDisableRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Disable Totp Api V1 User 2Fa Delete
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
      - HTTPBearer: []
  /api/v1/user/2fa/recovery-codes:
    post:
      tags:
      - 2FA
      summary: Regenerate Recovery Codes
      description: Regenerate recovery codes. Requires current TOTP code.
      operationId: regenerate_recovery_codes_api_v1_user_2fa_recovery_codes_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TotpVerifyRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TotpActivateResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
      - HTTPBearer: []
  /api/v1/auth/user/2fa/status:
    get:
      tags:
      - 2FA
      summary: Get Totp Status Package Alias
      description: Check if 2FA is enabled for the current user.
      operationId: get_totp_status_package_alias_api_v1_auth_user_2fa_status_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TotpStatusResponse'
      security:
      - HTTPBearer: []
  /api/v1/auth/user/2fa/setup:
    post:
      tags:
      - 2FA
      summary: Setup Totp Package Alias
      description: Generate TOTP secret and provisioning URI for QR code.
      operationId: setup_totp_package_alias_api_v1_auth_user_2fa_setup_post
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TotpSetupResponse'
      security:
      - HTTPBearer: []
  /api/v1/auth/user/2fa/activate:
    post:
      tags:
      - 2FA
      summary: Activate Totp Package Alias
      description: Verify first TOTP code and activate 2FA. Returns recovery codes.
      operationId: activate_totp_package_alias_api_v1_auth_user_2fa_activate_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TotpVerifyRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TotpActivateResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
      - HTTPBearer: []
  /api/v1/auth/user/2fa:
    delete:
      tags:
      - 2FA
      summary: Disable Totp Package Alias
      description: Disable 2FA. Requires current TOTP code.
      operationId: disable_totp_package_alias_api_v1_auth_user_2fa_delete
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TotpDisableRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Disable Totp Package Alias Api V1 Auth User 2Fa Delete
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
      - HTTPBearer: []
  /api/v1/auth/user/2fa/recovery-codes:
    post:
      tags:
      - 2FA
      summary: Regenerate Recovery Codes Package Alias
      description: Regenerate recovery codes. Requires current TOTP code.
      operationId: regenerate_recovery_codes_package_alias_api_v1_auth_user_2fa_recovery_codes_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TotpVerifyRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TotpActivateResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security:
      - HTTPBearer: []
components:
  schemas:
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    TotpActivateResponse:
      properties:
        enabled:
          type: boolean
          title: Enabled
          default: true
        recoveryCodes:
          items:
            type: string
          type: array
          title: Recoverycodes
          description: One-time recovery codes. Store these safely.
      type: object
      required:
      - recoveryCodes
      title: TotpActivateResponse
      description: Response after successfully activating 2FA.
    TotpDisableRequest:
      properties:
        code:
          type: string
          maxLength: 6
          minLength: 6
          title: Code
          description: Current TOTP code
      type: object
      required:
      - code
      title: TotpDisableRequest
      description: Request to disable 2FA.
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
            - type: string
            - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
      type: object
      required:
      - loc
      - msg
      - type
      title: ValidationError
    TotpSetupResponse:
      properties:
        secret:
          type: string
          title: Secret
          description: Base32 TOTP secret for manual entry
        provisioningUri:
          type: string
          title: Provisioninguri
          description: otpauth:// URI for QR code
      type: object
      required:
      - secret
      - provisioningUri
      title: TotpSetupResponse
      description: Response when initiating 2FA setup.
    TotpVerifyRequest:
      properties:
        code:
          type: string
          maxLength: 6
          minLength: 6
          title: Code
          description: 6-digit TOTP code
      type: object
      required:
      - code
      title: TotpVerifyRequest
      description: Request to verify a TOTP code.
    TotpStatusResponse:
      properties:
        enabled:
          type: boolean
          title: Enabled
        recoveryCodesRemaining:
          type: integer
          title: Recoverycodesremaining
          default: 0
      type: object
      required:
      - enabled
      title: TotpStatusResponse
      description: Response for 2FA status check.
  securitySchemes:
    HTTPBearer:
      type: http
      scheme: bearer
      x-default: Bearer <token>
    ApiKeyAuth:
      type: apiKey
      in: header
      name: x-api-key
      description: Alternative HEVN API key header. The CLI defaults to Authorization Bearer unless configured with HEVN_API_KEY_HEADER=X-Api-Key.