| GET | /admin/mfa/backup-codes | Admin list all backup code configurations | detail → |
| GET | /admin/mfa/backup-codes/{user_id} | Admin get user backup code count | detail → |
| GET | /admin/mfa/config-audit-logs | Get MFA configuration audit logs | detail → |
| GET | /admin/mfa/ip-whitelist | List IP whitelist | detail → |
| POST | /admin/mfa/ip-whitelist | Create IP whitelist | detail → |
| DELETE | /admin/mfa/ip-whitelist/{credential_id} | Delete IP whitelist | detail → |
| GET | /admin/mfa/ip-whitelist/{credential_id} | Get IP whitelist | detail → |
| PUT | /admin/mfa/ip-whitelist/{credential_id} | Update IP whitelist | detail → |
| GET | /admin/mfa/push/challenges | Admin view push challenge list | detail → |
| GET | /admin/mfa/push/stats | Get Push MFA challenge statistics | detail → |
| DELETE | /admin/mfa/reset/{user_id} | Admin reset user MFA | detail → |
| GET | /admin/mfa/risk-policies | List all risk policies | detail → |
| POST | /admin/mfa/risk-policies/evaluate | Evaluate risk policy | detail → |
| DELETE | /admin/mfa/risk-policies/{level} | Delete risk policy for specified level | detail → |
| PUT | /admin/mfa/risk-policies/{level} | Update risk policy for specified level | detail → |
| GET | /admin/mfa/risk-policy | Get MFA risk policy | detail → |
| PUT | /admin/mfa/risk-policy | Update MFA risk policy | detail → |
| GET | /admin/mfa/totp/{user_id} | Admin get user TOTP status | detail → |
| POST | /internal/mfa/erase | Internal erase user MFA data | detail → |
| GET | /internal/mfa/push/challenge/{credential_id} | Internal get Push challenge status | detail → |
| GET | /internal/mfa/status/{user_id} | Internal get user MFA status | detail → |
| GET | /internal/mfa/totp/devices | Internal get TOTP device list | detail → |
| POST | /internal/mfa/totp/disable | Internal disable TOTP | detail → |
| POST | /internal/mfa/totp/validate | Internal verify TOTP code | detail → |
| GET | /mfa/backup-codes | View backup codes | detail → |
| GET | /mfa/backup-codes/count | View backup code count | detail → |
| POST | /mfa/backup-codes/generate | Generate backup recovery codes | detail → |
| POST | /mfa/backup-codes/verify | Independent backup code verification | detail → |
| POST | /mfa/challenge | Create generic MFA challenge | detail → |
| POST | /mfa/credentials/{credential_id}/primary | Set primary authentication method | detail → |
| GET | /mfa/devices/sync | List synced devices | detail → |
| POST | /mfa/devices/sync | Sync device data | detail → |
| POST | /mfa/email/disable | Disable email MFA | detail → |
| PUT | /mfa/email/enroll | Email MFA registration | detail → |
| POST | /mfa/email/send | Send email verification code | detail → |
| POST | /mfa/email/verify | Verify email verification | detail → |
| GET | /mfa/methods | List MFA methods | detail → |
| DELETE | /mfa/methods/{method_type} | Delete MFA method | detail → |
| POST | /mfa/push/approve | Approve Push MFA challenge | detail → |
| POST | /mfa/push/challenge | Create Push MFA challenge | detail → |
| GET | /mfa/push/challenge/{credential_id} | Get Push challenge status | detail → |
| POST | /mfa/push/deny | Deny Push MFA challenge | detail → |
| GET | /mfa/push/history | Get Push MFA challenge history | detail → |
| POST | /mfa/sms/disable | Disable SMS MFA | detail → |
| PUT | /mfa/sms/enroll | SMS MFA Registration | detail → |
| POST | /mfa/sms/send | Send SMS Verification Code | detail → |
| POST | /mfa/sms/verify | Verify SMS Verification | detail → |
| GET | /mfa/status/{user_id} | Get User MFA Status | detail → |
| POST | /mfa/step-up | MFA Step-Up Authentication | detail → |
| GET | /mfa/totp/devices | List TOTP Devices | detail → |
| POST | /mfa/totp/devices | Register TOTP Device | detail → |
| DELETE | /mfa/totp/devices/{device_id} | Revoke TOTP Device | detail → |
| GET | /mfa/totp/devices/{device_id} | Get TOTP Device Details | detail → |
| POST | /mfa/totp/devices/{device_id}/disable | Disable TOTP Device | detail → |
| POST | /mfa/totp/devices/{device_id}/enable | Enable TOTP Device | detail → |
| POST | /mfa/totp/disable | Disable TOTP | detail → |
| POST | /mfa/totp/enable | Enable TOTP Multi-Factor Authentication | detail → |
| POST | /mfa/totp/setup | Enable TOTP Multi-Factor Authentication | detail → |
| POST | /mfa/totp/validate | Verify TOTP Code (During Login) | detail → |
| POST | /mfa/totp/verify | Verify and Enable TOTP | detail → |
| DELETE | /mfa/trusted-devices | Revoke All Trusted Devices | detail → |
| GET | /mfa/trusted-devices | List Trusted Devices | detail → |
| POST | /mfa/trusted-devices | Remember Trusted Device | detail → |
| GET | /mfa/trusted-devices/check | Check Device Trust Status | detail → |
| POST | /mfa/trusted-devices/cleanup | Clean Up Expired Trusted Devices | detail → |
| DELETE | /mfa/trusted-devices/{credential_id} | Revoke Trusted Device | detail → |
| GET | /mfa/trusted-devices/{credential_id} | Get Trusted Device Details | detail → |
| GET | /mfa/webauthn/credentials | List WebAuthn Credentials | detail → |
| POST | /mfa/webauthn/credentials/register | Start WebAuthn Credential Registration | detail → |
| POST | /mfa/webauthn/credentials/register/verify | Complete WebAuthn Credential Registration | detail → |
| DELETE | /mfa/webauthn/credentials/{credential_id} | Delete WebAuthn Credential | detail → |
| GET | /mfa/webauthn/credentials/{credential_id} | Get WebAuthn Credential Details | detail → |
| PUT | /mfa/webauthn/credentials/{credential_id} | Rename WebAuthn Credential | detail → |
Autional API Wiki