Initiate step-up authentication

POST

/v1/auth/step-up

Starts step-up MFA for a sensitive operation. Body: operation_type (e.g. transfer:create, card:reveal, password:change). Returns step_up_session_id and MFA delivery details. Complete with POST /v1/auth/step-up/verify to obtain X-Step-Up-Token.

Authentication: Bearer JWT (user session).

Request

Authorization

JWT Bearer

Add the parameter

Authorization

to Headers

Example:

Authorization: ********************

Body Params application/json

Examples

Responses

🟢200

application/json

Step-up session started

Bodyapplication/json

🟠400BadRequest

🟠401Unauthorized

🟠403Forbidden

🟠404NotFound

🟠409Conflict

🔴500InternalError

Request Example

Shell

JavaScript

Java

Swift

curl --location '/v1/auth/step-up' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "property1": "string",
    "property2": "string"
}'

Response Example

200 - Example 1

{
    "step_up_session_id": "3713e991-9814-4215-b7f9-7f03af0d5163",
    "mfa_method": "string",
    "mfa_destination": "string",
    "expires_in": 0
}

Modified at 2026-06-23 04:24:01

Verify step-up MFA and issue step-up token