> ## Documentation Index > Fetch the complete documentation index at: https://docs.evolutionfoundation.com.br/llms.txt > Use this file to discover all available pages before exploring further. # Verify Email OTP code > Verify Email OTP code sent to user email ## OpenAPI ````yaml /api-reference/openapi/Evo-Auth-Service/multi-factor-authentication.yaml post /api/v1/mfa/verify_email_otp openapi: 3.0.1 info: title: Evolution Foundation - Auth Service - Multi Factor Authentication description: Authentication and user and account management version: v1.0.0 servers: - url: https://api.evoai.app description: Production server - url: http://localhost:3001 description: Development server variables: port: default: '3001' - url: '{customUrl}' description: Custom server variables: customUrl: default: https://your-instance.com description: Enter your server URL security: [] paths: /api/v1/mfa/verify_email_otp: post: summary: Verify Email OTP code description: Verify Email OTP code sent to user email operationId: verifyEmailOTP parameters: [] requestBody: required: true content: application/json: schema: type: object properties: email: type: string format: email description: User email address example: user@example.com otp_code: type: string description: OTP code received via email example: '123456' required: - email - otp_code responses: '200': description: Email OTP verification successful headers: access-token: schema: type: string description: Authentication token (if login) client: schema: type: string description: Client identifier uid: schema: type: string description: User identifier content: application/json: schema: $ref: '#/components/schemas/MFAVerifyResponse' '400': description: Bad Request (invalid data) content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: invalid_email_otp_code: summary: Invalid Email OTP code value: success: false error: code: VALIDATION_ERROR message: Invalid Email OTP code meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/mfa/verify_email_otp method: POST missing_fields: summary: Missing required fields value: success: false error: code: VALIDATION_ERROR message: Email and OTP code are required meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/mfa/verify_email_otp method: POST '401': description: Unauthorized (invalid or missing token) content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: unauthorized: summary: Unauthorized access value: success: false error: code: INVALID_TOKEN message: Invalid token meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/mfa/verify_email_otp method: POST '403': description: Forbidden (insufficient permissions) content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: forbidden: summary: Access forbidden value: success: false error: code: FORBIDDEN message: You do not have permission to access this resource meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/mfa/verify_email_otp method: POST '404': description: Not Found (resource not found) content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: user_not_found: summary: User not found value: success: false error: code: NOT_FOUND message: User not found meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/mfa/verify_email_otp method: POST email_otp_not_setup: summary: Email OTP not setup value: success: false error: code: NOT_FOUND message: Email OTP is not setup for this user meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/mfa/verify_email_otp method: POST '500': description: Internal Server Error (server error) content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' examples: internal_error: summary: Internal server error value: success: false error: code: INTERNAL_ERROR message: An unexpected error occurred meta: timestamp: '2024-01-15T10:30:00Z' path: /api/v1/mfa/verify_email_otp method: POST security: - ApiAccessTokenAuth: [] components: schemas: MFAVerifyResponse: type: object properties: success: type: boolean example: true data: type: object properties: mfa_confirmed: type: boolean user: $ref: '#/components/schemas/User' message: type: string ErrorResponse: type: object required: - success - error - meta properties: success: type: boolean example: false error: type: object required: - code - message properties: code: type: string example: VALIDATION_ERROR message: type: string example: Validation failed details: type: object additionalProperties: true nullable: true meta: type: object required: - timestamp - path - method properties: timestamp: type: string format: date-time example: '2024-01-15T10:30:00Z' path: type: string example: /api/v1/super_admin/accounts/123 method: type: string example: POST User: type: object properties: id: type: string format: uuid name: type: string email: type: string format: email type: type: string enum: - User - SuperAdmin role: type: object nullable: true properties: id: type: string format: uuid key: type: string name: type: string pubsub_token: type: string display_name: type: string nullable: true availability: type: string enum: - online - busy - offline mfa_enabled: type: boolean confirmed: type: boolean custom_attributes: type: object additionalProperties: true ui_settings: type: object additionalProperties: true is_super_admin: type: boolean created_at: type: string format: date-time updated_at: type: string format: date-time securitySchemes: ApiAccessTokenAuth: type: apiKey in: header name: api_access_token description: API access token authentication ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.