Remove MFA enrollment

POST

/oauth/mfaDelete

Last modified:2026-10-30 21:20:02

OperationId:MFADelete

Removes an authenticator app enrollment, by default the token holder's own. Send the access token in the ns_access_token cookie or as Authorization: Bearer. Any user scope can remove its own enrollment; removing another user's with ns_id requires Office Manager, Site Manager, Reseller, or Super User scope.

Request

Authorization

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

The removal is accepted and applied shortly after. Also returned when nothing matched, including when mfa_vendor or mfa_type does not match the stored values.

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🔴500Server Error

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/oauth/mfaDelete' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "mfa_vendor": "google",
    "mfa_type": "authenticator"
}'

Response Example

200 - Success

{
    "status": "success",
    "message": "MFA disabled successfully",
    "enrolled": false,
    "apiversion": "46.0.0"
}

Modified at 2026-10-30 21:20:02

Enroll in MFA with access token

Refresh session tokens