curl --request POST \
--url https://api.mnemom.ai/v1/auth/mfa/enroll \
--header 'Content-Type: application/json' \
--cookie mnemom_session= \
--data '
{
"friendly_name": "<string>"
}
'{
"id": "<string>",
"type": "totp",
"totp": {
"qr_code": "<string>",
"secret": "<string>",
"uri": "<string>"
}
}Returns the TOTP secret + provisioning URI for a QR code. Factor starts in unverified state until /auth/mfa/verify is called against it.
curl --request POST \
--url https://api.mnemom.ai/v1/auth/mfa/enroll \
--header 'Content-Type: application/json' \
--cookie mnemom_session= \
--data '
{
"friendly_name": "<string>"
}
'{
"id": "<string>",
"type": "totp",
"totp": {
"qr_code": "<string>",
"secret": "<string>",
"uri": "<string>"
}
}HttpOnly, Secure, SameSite=Lax cookie issued by /v1/auth/sign-in (or the SSO / email-callback flows). The value is an AES-256-GCM-encrypted blob of {access_token, refresh_token, issued_at, auth_method}. Browser clients include this automatically with credentials: "include".