# MFA_REQUIRED

The session needs two-step verification before it can use this route.

## What happened

An account with a second factor must finish it before its session can call most routes. A session that has not is refused with 403 and this code.

## What to do

Finish the two-step verification, then send the request again.

## Example

```json
{
  "error": {
    "code": "MFA_REQUIRED",
    "message": "This session needs two-step verification. Finish it, then try again.",
    "detail": {
      "request_id": "3c6f9a52-8e1d-4b7a-9f20-6d41a8c5e7b3"
    }
  }
}
```