Skip to main content
POST
Complete FIDO MFA for Cubist login

Authorizations

X-API-KEY
string
header
required

Authorization method required to allow user to access the api endpoints.

Path Parameters

loginId
string
required

Body

application/json
assertion
object
required

WebAuthn assertion payload from navigator.credentials.get

Response

200 - application/json
status
enum<string>
required
Available options:
mfa_required,
complete,
expired
login_id
string
mfa_types
string[]

MFA types required (e.g. Totp, Fido)

expiration
number

CubeSigner session expiration (unix seconds). Present when status is complete. Use login_id with POST /v2/account-connections — the refresh token is never returned.

Last modified on August 11, 2026