Skip to main content
POST
Complete FIDO MFA for Cubist login

Authorizations

X-API-KEY
string
header
required

Authorization method required to allow user to access the api endpoints.

Path Parameters

loginId
string
required

Body

application/json
assertion
object
required

WebAuthn assertion payload from navigator.credentials.get

Response

200 - application/json
status
enum<string>
required
Available options:
mfa_required,
complete,
expired
login_id
string
mfa_types
string[]

MFA types required (e.g. Totp, Fido)

refresh_token
string

Present when status is complete; use for connection create or direct bootstrap

expiration
number
Last modified on July 22, 2026