# Email a step-up code

> Source: https://truto.one/docs/api-reference/admin/step-up/send-email-code/

`POST /auth/step-up/email-code`

Resource: **Step-up**

## Request body

- **`action`** _(string)_
  The change a step-up guards, as `step_up_action` names it.
  Allowed: `passkey_register`, `api_token_create`, `mcp_oauth_consent`, `mcp_server_create`, `mfa_enable`, `mfa_disable`, `mfa_reset`, `backup_codes_regenerate`

## Code examples

### curl

```bash
curl -X POST 'https://api.truto.one/auth/step-up/email-code' \
  -H 'Authorization: Bearer <your_api_token>' \
  -H 'Content-Type: application/json' \
  -d '{
  "action": "passkey_register"
}'
```

### JavaScript

```javascript
const body = {
  "action": "passkey_register"
};

const response = await fetch('https://api.truto.one/auth/step-up/email-code', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer <your_api_token>',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify(body),
});

const data = await response.json();
console.log(data);
```

### Python

```python
import requests

url = "https://api.truto.one/auth/step-up/email-code"
headers = {
    "Authorization": "Bearer <your_api_token>",
    "Content-Type": "application/json",
}
params = {
}
payload = {
    "action": "passkey_register"
}

response = requests.post(url, headers=headers, params=params, json=payload)
print(response.json())
```