CRM Open API DocumentationCRM Open API Documentation
REST API
Webhooks
Client OAuth
PSP Open API
External Exchange Rates
REST API
Webhooks
Client OAuth
PSP Open API
External Exchange Rates
  • Client OAuth Flow
  • OAuth Applications
  • Authorization Code + PKCE

    • Authorization Code + PKCE Introduction
    • Redirect to Login
    • Get Token
    • Compute PKCE Code Challenge
  • Resource Owner Password Credentials (ROPC)

    • ROPC Introduction
    • Get Token
    • Verify MFA Code
    • Get MFA Secret
    • Send Email OTP for MFA
    • Bind MFA Method and enable MFA

Send Email OTP for MFA

POST /oauth/mfa/email/send

Basic Authorization (retrieve credentials from OAuth Application)

  • Username: OAuth Client ID
  • Password: OAuth Client Secret
  • HTTP header: Authorization: Basic base64(client_id:client_secret)

Headers

  • Content-Type: application/json

Request Body

KeyTypeRequiredRuleDescription
mfa_tokenstringMandatoryMFA token generated after validating ROPC credentials

Expected HTTP status code

  • 200

Error

Codeerrorerror_description
400invalid_grantInvalid Mfa token
400invalid_grantMfa Activated
Last Updated: 10/28/25, 2:41 AM
Prev
Get MFA Secret
Next
Bind MFA Method and enable MFA