{ "info": { "_postman_id": "b2fe63bf-bc1f-4252-a270-da2bdbd1e35e", "name": "Upsun.com Rest Add-ons MFA API", "description": "# Introduction\n\nUpsun, formerly Platform.sh, is a container-based Platform-as-a-Service. Our main API\nis simply Git. With a single `git push` and a couple of YAML files in\nyour repository you can deploy an arbitrarily complex cluster.\nEvery [**Project**](#tag/Project) can have multiple applications (PHP,\nNode.js, Python, Ruby, Go, etc.) and managed, automatically\nprovisioned services (databases, message queues, etc.).\n\nEach project also comes with multiple concurrent\nlive staging/development [**Environments**](#tag/Environment).\nThese ephemeral development environments\nare automatically created every time you push a new branch or create a\npull request, and each has a full copy of the data of its parent branch,\nwhich is created on-the-fly in seconds.\n\nOur Git implementation supports integrations with third party Git\nproviders such as GitHub, Bitbucket, or GitLab, allowing you to simply\nintegrate Upsun into your existing workflow.\n\n## Using the REST API\n\nIn addition to the Git API, we also offer a REST API that allows you to manage\nevery aspect of the platform, from managing projects and environments,\nto accessing accounts and subscriptions, to creating robust workflows\nand integrations with your CI systems and internal services.\n\nThese API docs are generated from a standard **OpenAPI (Swagger)** Specification document\nwhich you can find here in [YAML](openapispec-upsun.yaml) and in [JSON](openapispec-upsun.json) formats.\n\nThis RESTful API consumes and produces HAL-style JSON over HTTPS,\nand any REST library can be used to access it. On GitHub, we also host\na few API libraries that you can use to make API access easier, such as our\n[PHP API client](https://github.com/upsun/upsun-sdk-php).\n\nIn order to use the API you will first need to have an [Upsun account](https://auth.upsun.com/register/) \nand [create an API Token](https://docs.upsun.com/anchors/cli/api-token/).\n\n# Authentication\n\n## OAuth2\n\nAPI authentication is done with OAuth2 access tokens.\n\n### API tokens\n\nYou can use an API token as one way to get an OAuth2 access token. This\nis particularly useful in scripts, e.g. for CI pipelines.\n\nTo create an API token, go to the \"API Tokens\" section\nof the \"Account Settings\" tab on the [Console](https://console.upsun.com).\n\nTo exchange this API token for an access token, a `POST` request\nmust be made to `https://auth.upsun.com/oauth2/token`.\n\nThe request will look like this in cURL:\n\n
\ncurl -u platform-api-user: \\\n    -d 'grant_type=api_token&api_token=API_TOKEN' \\\n    https://auth.upsun.com/oauth2/token\n
\n\nThis will return a \"Bearer\" access token that\ncan be used to authenticate further API requests, for example:\n\n
\n{\n    \"access_token\": \"abcdefghij1234567890\",\n    \"expires_in\": 900,\n    \"token_type\": \"bearer\"\n}\n
\n\n### Using the Access Token\n\nTo authenticate further API requests, include this returned bearer token\nin the `Authorization` header. For example, to retrieve a list of\n[Projects](#tag/Project)\naccessible by the current user, you can make the following request\n(substituting the dummy token for your own):\n\n
\ncurl -H \"Authorization: Bearer abcdefghij1234567890\" \\\n    https://api.upsun.com/projects\n
\n\n# HAL Links\n\nMost endpoints in the API return fields which defines a HAL\n(Hypertext Application Language) schema for the requested endpoint.\nThe particular objects returns and their contents can vary by endpoint.\nThe payload examples we give here for the requests do not show these\nelements. These links can allow you to create a fully dynamic API client\nthat does not need to hardcode any method or schema.\n\nUnless they are used for pagination we do not show the HAL links in the\npayload examples in this documentation for brevity and as their content\nis contextual (based on the permissions of the user).\n\n## _links Objects\n\nMost endpoints that respond to `GET` requests will include a `_links` object\nin their response. The `_links` object contains a key-object pair labelled `self`, which defines\ntwo further key-value pairs:\n\n* `href` - A URL string referring to the fully qualified name of the returned object. For many endpoints, this will be the direct link to the API endpoint on the region gateway, rather than on the general API gateway. This means it may reference a host of, for example, `eu-2.platform.sh` rather than `api.upsun.com`.\n* `meta` - An object defining the OpenAPI Specification (OAS) [schema object](https://swagger.io/specification/#schemaObject) of the component returned by the endpoint.\n\nThere may be zero or more other fields in the `_links` object resembling fragment identifiers\nbeginning with a hash mark, e.g. `#edit` or `#delete`. Each of these keys\nrefers to a JSON object containing two key-value pairs:\n\n* `href` - A URL string referring to the path name of endpoint which can perform the action named in the key.\n* `meta` - An object defining the OAS schema of the endpoint. This consists of a key-value pair, with the key defining an HTTP method and the value defining the [operation object](https://swagger.io/specification/#operationObject) of the endpoint.\n\nTo use one of these HAL links, you must send a new request to the URL defined\nin the `href` field which contains a body defined the schema object in the `meta` field.\n\nFor example, if you make a request such as `GET /projects/abcdefghij1234567890`, the `_links`\nobject in the returned response will include the key `#delete`. That object\nwill look something like this fragment:\n\n```\n\"#delete\": {\n \"href\": \"/api/projects/abcdefghij1234567890\",\n \"meta\": {\n \"delete\": {\n \"responses\": {\n . . . // Response definition omitted for space\n },\n \"parameters\": []\n }\n }\n}\n```\n\nTo use this information to delete a project, you would then send a `DELETE`\nrequest to the endpoint `https://api.upsun.com/api/projects/abcdefghij1234567890`\nwith no body or parameters to delete the project that was originally requested.\n\n## _embedded Objects\n\nRequests to endpoints which create or modify objects, such as `POST`, `PATCH`, or `DELETE`\nrequests, will include an `_embedded` key in their response. The object\nrepresented by this key will contain the created or modified object. This\nobject is identical to what would be returned by a subsequent `GET` request\nfor the object referred to by the endpoint.\n\n\nContact Support:\n Name: Support", "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json", "createdAt": "2026-07-28T03:24:32.000Z", "updatedAt": "2026-07-28T03:24:32.000Z", "lastUpdatedBy": "35240", "uid": "35240-b2fe63bf-bc1f-4252-a270-da2bdbd1e35e" }, "item": [ { "name": "users", "item": [ { "name": "{user_id}", "item": [ { "name": "totp", "item": [ { "name": "Get information about TOTP enrollment", "id": "e220a7b3-6474-42e4-ba85-c4aa96a787f0", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "id": "4d63aa04-f32f-44a4-b405-ec44d27ecfc3", "key": "user_id", "value": "", "description": "(Required) The ID of the user." } ] }, "description": "Retrieves TOTP enrollment information." }, "response": [ { "id": "3025c67e-2654-4aff-af25-52d00ce42d26", "name": "OK", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "key": "user_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"issuer\": \"\",\n \"account_name\": \"\",\n \"secret\": \"\",\n \"qr_code\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-3025c67e-2654-4aff-af25-52d00ce42d26" }, { "id": "1bac8d79-1e6e-4ff9-baec-5cb380dca9c9", "name": "Forbidden", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "key": "user_id" } ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\",\n \"message\": \"\",\n \"code\": \"\",\n \"detail\": {},\n \"title\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-1bac8d79-1e6e-4ff9-baec-5cb380dca9c9" }, { "id": "d00326be-4498-4a10-94b5-e0b6113d3100", "name": "Conflict", "originalRequest": { "method": "GET", "header": [ { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "key": "user_id" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-d00326be-4498-4a10-94b5-e0b6113d3100" } ], "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-e220a7b3-6474-42e4-ba85-c4aa96a787f0" }, { "name": "Confirm TOTP enrollment", "id": "adecbea6-0334-4730-9bb5-4940876d835e", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"secret\": \"\",\n \"passcode\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "id": "57a72dea-29ec-47ae-9bdb-63dc5bb0c91d", "key": "user_id", "value": "", "description": "(Required) The ID of the user." } ] }, "description": "Confirms the given TOTP enrollment." }, "response": [ { "id": "5e562ff7-06d2-4075-ba4c-94d87ff64676", "name": "OK", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"secret\": \"\",\n \"passcode\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "key": "user_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"recovery_codes\": [\n \"\",\n \"\"\n ]\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-5e562ff7-06d2-4075-ba4c-94d87ff64676" }, { "id": "2897bf13-4da9-4e0a-81e7-a8175f97b053", "name": "Bad Request", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"secret\": \"\",\n \"passcode\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "key": "user_id" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\",\n \"message\": \"\",\n \"code\": \"\",\n \"detail\": {},\n \"title\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-2897bf13-4da9-4e0a-81e7-a8175f97b053" }, { "id": "ea0efad3-be8a-4847-94b4-30e2a0f165e3", "name": "Forbidden", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"secret\": \"\",\n \"passcode\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "key": "user_id" } ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\",\n \"message\": \"\",\n \"code\": \"\",\n \"detail\": {},\n \"title\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-ea0efad3-be8a-4847-94b4-30e2a0f165e3" }, { "id": "8943c859-4166-455b-8f71-cc3587326336", "name": "Conflict", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"secret\": \"\",\n \"passcode\": \"\"\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "key": "user_id" } ] } }, "status": "Conflict", "code": 409, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\",\n \"message\": \"\",\n \"code\": \"\",\n \"detail\": {},\n \"title\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-8943c859-4166-455b-8f71-cc3587326336" } ], "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-adecbea6-0334-4730-9bb5-4940876d835e" }, { "name": "Withdraw TOTP enrollment", "id": "1c8b56d6-02cd-494e-9286-bc065c1a0497", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "id": "7bd0b544-13a6-490b-9152-4d679076904f", "key": "user_id", "value": "", "description": "(Required) The ID of the user." } ] }, "description": "Withdraws from the TOTP enrollment." }, "response": [ { "id": "ad9d7159-9a60-42ed-995c-ea68765ea6f1", "name": "No Content", "originalRequest": { "method": "DELETE", "header": [ { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "key": "user_id" } ] } }, "status": "No Content", "code": 204, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-ad9d7159-9a60-42ed-995c-ea68765ea6f1" }, { "id": "31e5c620-1876-4c85-9643-addb188baa48", "name": "Forbidden", "originalRequest": { "method": "DELETE", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "key": "user_id" } ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\",\n \"message\": \"\",\n \"code\": \"\",\n \"detail\": {},\n \"title\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-31e5c620-1876-4c85-9643-addb188baa48" }, { "id": "fd97e8a7-dbb8-4031-b1b8-f2e98bc43fde", "name": "Not Found", "originalRequest": { "method": "DELETE", "header": [ { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/totp", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "totp" ], "variable": [ { "key": "user_id" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-fd97e8a7-dbb8-4031-b1b8-f2e98bc43fde" } ], "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-1c8b56d6-02cd-494e-9286-bc065c1a0497" } ], "id": "e1b4c729-771d-4e99-96a5-1d2f8978bf60", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-e1b4c729-771d-4e99-96a5-1d2f8978bf60" }, { "name": "codes", "item": [ { "name": "Re-create recovery codes", "id": "d4ae785e-1391-4646-8c32-5f5873d455b9", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/codes", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "codes" ], "variable": [ { "id": "c68fba2a-b196-4554-917c-52b7ecdf0ddd", "key": "user_id", "value": "", "description": "(Required) The ID of the user." } ] }, "description": "Re-creates recovery codes for the MFA enrollment." }, "response": [ { "id": "6b7f37f7-55e7-4cf7-8fbd-c10a3669e070", "name": "Created", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/codes", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "codes" ], "variable": [ { "key": "user_id" } ] } }, "status": "Created", "code": 201, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"recovery_codes\": [\n \"\",\n \"\"\n ]\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-6b7f37f7-55e7-4cf7-8fbd-c10a3669e070" }, { "id": "b21a3893-d52f-4165-9bf5-e54313ad5470", "name": "Forbidden", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/codes", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "codes" ], "variable": [ { "key": "user_id" } ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\",\n \"message\": \"\",\n \"code\": \"\",\n \"detail\": {},\n \"title\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-b21a3893-d52f-4165-9bf5-e54313ad5470" }, { "id": "0aba1228-3fd3-4c7d-9f79-8e8d9d385228", "name": "Not Found", "originalRequest": { "method": "POST", "header": [ { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/users/:user_id/codes", "host": [ "{{baseUrl}}" ], "path": [ "users", ":user_id", "codes" ], "variable": [ { "key": "user_id" } ] } }, "status": "Not Found", "code": 404, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-0aba1228-3fd3-4c7d-9f79-8e8d9d385228" } ], "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-d4ae785e-1391-4646-8c32-5f5873d455b9" } ], "id": "9700652c-2e89-497f-9a74-f10dbb119499", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-9700652c-2e89-497f-9a74-f10dbb119499" } ], "id": "e5bb91c1-1062-4dd5-8733-a0501d0f3031", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-e5bb91c1-1062-4dd5-8733-a0501d0f3031" } ], "id": "fe1e4e28-6789-406c-a289-cae5b313e94f", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-fe1e4e28-6789-406c-a289-cae5b313e94f" }, { "name": "organizations", "item": [ { "name": "{organization_id}", "item": [ { "name": "mfa-enforcement", "item": [ { "name": "enable", "item": [ { "name": "Enable organization MFA enforcement", "id": "f57fbd44-4ad5-44aa-b2e2-41c9f033b448", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa-enforcement/enable", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa-enforcement", "enable" ], "variable": [ { "id": "da9f4f6c-e160-4293-b734-d110df467dea", "key": "organization_id", "value": "", "description": "(Required) The ID of the organization." } ] }, "description": "Enables MFA enforcement for the specified organization." }, "response": [ { "id": "bcefffec-45d9-41c8-861a-e332be75ca4f", "name": "No Content", "originalRequest": { "method": "POST", "header": [ { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa-enforcement/enable", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa-enforcement", "enable" ], "variable": [ { "key": "organization_id" } ] } }, "status": "No Content", "code": 204, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-bcefffec-45d9-41c8-861a-e332be75ca4f" }, { "id": "18988523-4af2-4e6b-a821-2076d60c18a3", "name": "Forbidden", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa-enforcement/enable", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa-enforcement", "enable" ], "variable": [ { "key": "organization_id" } ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\",\n \"message\": \"\",\n \"code\": \"\",\n \"detail\": {},\n \"title\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-18988523-4af2-4e6b-a821-2076d60c18a3" } ], "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-f57fbd44-4ad5-44aa-b2e2-41c9f033b448" } ], "id": "1f183835-2ecc-4a4b-86a4-95af68fc49e2", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-1f183835-2ecc-4a4b-86a4-95af68fc49e2" }, { "name": "disable", "item": [ { "name": "Disable organization MFA enforcement", "id": "6ae0e217-6462-4459-9270-2defd8f42598", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa-enforcement/disable", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa-enforcement", "disable" ], "variable": [ { "id": "7e07e29d-af7a-4a26-9f44-bfada845a8b4", "key": "organization_id", "value": "", "description": "(Required) The ID of the organization." } ] }, "description": "Disables MFA enforcement for the specified organization." }, "response": [ { "id": "8d704c45-5b2d-4b41-a9f9-5d1afe75c477", "name": "No Content", "originalRequest": { "method": "POST", "header": [ { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa-enforcement/disable", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa-enforcement", "disable" ], "variable": [ { "key": "organization_id" } ] } }, "status": "No Content", "code": 204, "_postman_previewlanguage": "text", "header": [], "cookie": [], "responseTime": null, "body": null, "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-8d704c45-5b2d-4b41-a9f9-5d1afe75c477" }, { "id": "a8be35d4-7606-4ccb-b0f6-469746d0c75d", "name": "Forbidden", "originalRequest": { "method": "POST", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa-enforcement/disable", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa-enforcement", "disable" ], "variable": [ { "key": "organization_id" } ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\",\n \"message\": \"\",\n \"code\": \"\",\n \"detail\": {},\n \"title\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-a8be35d4-7606-4ccb-b0f6-469746d0c75d" } ], "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-6ae0e217-6462-4459-9270-2defd8f42598" } ], "id": "d441dff5-fc4f-4fd8-a3e8-08e70aa49128", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-d441dff5-fc4f-4fd8-a3e8-08e70aa49128" }, { "name": "Get organization MFA settings", "id": "a99e41c9-7391-4501-af62-911d7e3ec95a", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" } ], "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa-enforcement", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa-enforcement" ], "variable": [ { "id": "cf19ca0c-9dea-43cf-a75f-b1652d09f28e", "key": "organization_id", "value": "", "description": "(Required) The ID of the organization.
\nPrefix with name= to retrieve the organization by name instead.\n" } ] }, "description": "Retrieves MFA settings for the specified organization." }, "response": [ { "id": "a0ab87c2-7c38-42ee-bb66-e2a7c310c01b", "name": "OK", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa-enforcement", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa-enforcement" ], "variable": [ { "key": "organization_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"enforce_mfa\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-a0ab87c2-7c38-42ee-bb66-e2a7c310c01b" }, { "id": "cecd9188-17c7-48b3-a207-6ff1be2befed", "name": "Forbidden", "originalRequest": { "method": "GET", "header": [ { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa-enforcement", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa-enforcement" ], "variable": [ { "key": "organization_id" } ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\",\n \"message\": \"\",\n \"code\": \"\",\n \"detail\": {},\n \"title\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-cecd9188-17c7-48b3-a207-6ff1be2befed" } ], "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-a99e41c9-7391-4501-af62-911d7e3ec95a" } ], "id": "80713e20-c60a-410b-acc2-15f303891bb9", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-80713e20-c60a-410b-acc2-15f303891bb9" }, { "name": "mfa", "item": [ { "name": "remind", "item": [ { "name": "Send MFA reminders to organization members", "id": "1cba8611-ef47-4630-843d-ae776dee9bcb", "protocolProfileBehavior": { "disableBodyPruning": true }, "request": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" } ], "body": { "mode": "raw", "raw": "{\n \"user_ids\": [\n \"\",\n \"\"\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa/remind", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa", "remind" ], "variable": [ { "id": "eaa052c1-3f48-4e59-8074-ff89b5d05f3c", "key": "organization_id", "value": "", "description": "(Required) The ID of the organization." } ] }, "description": "Sends a reminder about setting up MFA to the specified organization members." }, "response": [ { "id": "0c885a56-9275-47b5-94bc-b7fc411506fb", "name": "OK", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"user_ids\": [\n \"\",\n \"\"\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa/remind", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa", "remind" ], "variable": [ { "key": "organization_id" } ] } }, "status": "OK", "code": 200, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"Ut_b6\": {\n \"code\": \"\",\n \"message\": \"\"\n }\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-0c885a56-9275-47b5-94bc-b7fc411506fb" }, { "id": "964a2172-f522-40f8-a48d-072c6a45b42d", "name": "Bad Request", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"user_ids\": [\n \"\",\n \"\"\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa/remind", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa", "remind" ], "variable": [ { "key": "organization_id" } ] } }, "status": "Bad Request", "code": 400, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\",\n \"message\": \"\",\n \"code\": \"\",\n \"detail\": {},\n \"title\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-964a2172-f522-40f8-a48d-072c6a45b42d" }, { "id": "838a998f-e964-40a2-9a49-94a61b9d82f4", "name": "Forbidden", "originalRequest": { "method": "POST", "header": [ { "key": "Content-Type", "value": "application/json" }, { "key": "Accept", "value": "application/json" }, { "description": "Added as a part of security scheme: oauth2", "key": "Authorization", "value": "" } ], "body": { "mode": "raw", "raw": "{\n \"user_ids\": [\n \"\",\n \"\"\n ]\n}", "options": { "raw": { "headerFamily": "json", "language": "json" } } }, "url": { "raw": "{{baseUrl}}/organizations/:organization_id/mfa/remind", "host": [ "{{baseUrl}}" ], "path": [ "organizations", ":organization_id", "mfa", "remind" ], "variable": [ { "key": "organization_id" } ] } }, "status": "Forbidden", "code": 403, "_postman_previewlanguage": "json", "header": [ { "key": "Content-Type", "value": "application/json" } ], "cookie": [], "responseTime": null, "body": "{\n \"status\": \"\",\n \"message\": \"\",\n \"code\": \"\",\n \"detail\": {},\n \"title\": \"\"\n}", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-838a998f-e964-40a2-9a49-94a61b9d82f4" } ], "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-1cba8611-ef47-4630-843d-ae776dee9bcb" } ], "id": "ba0d6f68-0642-4a71-84da-56844696cb12", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-ba0d6f68-0642-4a71-84da-56844696cb12" } ], "id": "c9998a10-2dc1-47db-bde8-66876b79809e", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-c9998a10-2dc1-47db-bde8-66876b79809e" } ], "id": "c06a97ad-04a9-454f-892d-116c3967ded1", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-c06a97ad-04a9-454f-892d-116c3967ded1" } ], "id": "07de14b9-b02f-4377-8005-907cbdb6d9e5", "createdAt": "2026-07-28T03:24:33.000Z", "updatedAt": "2026-07-28T03:24:33.000Z", "uid": "35240-07de14b9-b02f-4377-8005-907cbdb6d9e5" } ], "auth": { "type": "oauth2", "oauth2": [ { "key": "redirect_uri", "value": "https://auth.api.platform.sh/oauth2/token", "type": "string" }, { "key": "accessTokenUrl", "value": "https://auth.api.platform.sh/oauth2/token", "type": "string" }, { "key": "authUrl", "value": "https://auth.api.platform.sh/oauth2/authorize", "type": "string" }, { "key": "grant_type", "value": "authorization_code", "type": "string" } ] }, "variable": [ { "key": "schemes", "value": "https" }, { "key": "baseUrl", "value": "{{schemes}}://api.upsun.com" } ] }