# Medusa Multi-Factor Authentication API

**Canonical:** https://apis.io/apis/medusa/medusa-multi-factor-authentication-api/  
**Provider:** Medusa — https://apis.io/providers/medusa/  
**Base URL:** https://{medusa-backend-domain}  
**Documentation:** https://docs.medusajs.com/api/store

Medusa Multi-Factor Authentication API is one of 82 APIs that [Medusa](https://apis.io/providers/medusa/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Multi-Factor Authentication. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and authentication docs.

Multi-factor authentication (MFA) adds an extra layer of security to admin accounts by requiring additional verification factors during login, such as a TOTP code or a recovery code. These API routes allow admin users to manage their MFA factors, challenges, and recovery codes.

## Operations (5)

| Method | Path | Summary |
|---|---|---|
| POST | `/auth/mfa/challenges/{id}/verify` | Verify a Multi-Factor Authentication (MFA) Challenge |
| GET | `/auth/mfa/factors` | List Multifactor Authentication (MFA) Factors |
| POST | `/auth/mfa/factors` | Start Multi-Factor Authentication (MFA) Factor Enrollment |
| POST | `/auth/mfa/factors/{id}/verify` | Verify and Enable a Multi-Factor Authentication (MFA) Factor |
| POST | `/auth/mfa/recovery-codes` | Generate Multi-Factor Authentication (MFA) Recovery Codes |

## Machine-readable artifacts (9)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/medusa/refs/heads/main/openapi/medusa-multi-factor-authentication-api-openapi.yml
- **Documentation** — https://docs.medusajs.com/api/store
- **APIReference** — https://docs.medusajs.com/api/store
- **OpenAPI Source** — https://raw.githubusercontent.com/medusajs/medusa/develop/www/apps/api-reference/specs/store/openapi.full.yaml
- **Authentication** — https://docs.medusajs.com/api/store#authentication
- **Documentation** — https://docs.medusajs.com/api/admin
- **APIReference** — https://docs.medusajs.com/api/admin
- **OpenAPI Source** — https://raw.githubusercontent.com/medusajs/medusa/develop/www/apps/api-reference/specs/admin/openapi.full.yaml
- **Authentication** — https://docs.medusajs.com/api/admin#authentication

## Other Medusa APIs (12)

- [Medusa GraphQL API](https://apis.io/apis/medusa/medusa-graphql-api/)
- [Medusa MCP Remote Server](https://apis.io/apis/medusa/medusa-mcp-server/)
- [Medusa Api Keys API](https://apis.io/apis/medusa/medusa-api-keys-api/)
- [Medusa Auth API](https://apis.io/apis/medusa/medusa-auth-api/)
- [Medusa [auth Provider] API](https://apis.io/apis/medusa/medusa-auth-provider-api/)
- [Medusa Campaigns API](https://apis.io/apis/medusa/medusa-campaigns-api/)
- [Medusa Carts API](https://apis.io/apis/medusa/medusa-carts-api/)
- [Medusa Claims API](https://apis.io/apis/medusa/medusa-claims-api/)
- [Medusa Collections API](https://apis.io/apis/medusa/medusa-collections-api/)
- [Medusa Currencies API](https://apis.io/apis/medusa/medusa-currencies-api/)
- [Medusa Customer Groups API](https://apis.io/apis/medusa/medusa-customer-groups-api/)
- [Medusa Customers API](https://apis.io/apis/medusa/medusa-customers-api/)

## Tags

Multi-Factor Authentication

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/medusa/medusa-multi-factor-authentication-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/medusa/.