Organization

organization_security_mfa_enable

Turns ON organization-wide multi-factor authentication (2FA) enforcement for an organization.

Tool

organization_security_mfa_enable

Turns ON organization-wide multi-factor authentication (2FA) enforcement for an organization.

Turns ON organization-wide multi-factor authentication (2FA) enforcement for an organization. Owner-only: only the owner of the organization may call it. This is deliberately one-way — disabling MFA enforcement is not available over MCP; use the organization security settings in the Product App instead. The policy is strictest-wins across all of a member’s organizations, so enabling it here forces MFA enrollment for every member of this organization at their next sign-in or token refresh.

Behavior

HTTP: POST /governance/api/v1/organizations/:organizationId/security/mfa/enable

Arguments

Name	Type	Required	Description
organizationId	string	•	No description in the catalog.

Response

Field	Type	Always	Description
mfaRequired	boolean	•
trustedDeviceAllowed	boolean	•

Try it

Turns ON organization-wide multi-factor authentication (2FA) enforcement for an organization.

When to use

Example

Ask your agent something like this:

Turns ON organization-wide multi-factor authentication (2FA) enforcement for an organization.

The agent will invoke organization_security_mfa_enable with these arguments:

{
  "organizationId": "<organizationId>"
}