> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gosentrix.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Elevate Session

> Elevate session for sensitive operations

Elevate your session to perform sensitive operations that require step-up authentication.

<RequestExample>
  ```bash theme={null}
  curl -X POST https://api.gosentrix.io/api/v1/sessions/elevate \
    -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
    -H "Content-Type: application/json" \
    -d '{
      "mfa_code": "123456"
    }'
  ```
</RequestExample>

<ResponseExample>
  ```json theme={null}
  {
    "elevated": true,
    "elevated_until": "2024-01-01T12:15:00Z",
    "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."
  }
  ```
</ResponseExample>

## Request Body

<ParamField path="mfa_code" type="string" required>
  MFA code from authenticator app or backup code
</ParamField>

## Response

<ResponseField name="elevated" type="boolean">
  Session elevation status
</ResponseField>

<ResponseField name="elevated_until" type="string">
  ISO 8601 timestamp when elevation expires (15 minutes)
</ResponseField>

<ResponseField name="access_token" type="string">
  New access token with elevated permissions
</ResponseField>

## Errors

<ResponseField name="400" type="object">
  Invalid MFA code
</ResponseField>

<ResponseField name="401" type="object">
  Invalid or missing token
</ResponseField>

<ResponseField name="403" type="object">
  MFA not enrolled
</ResponseField>

## Notes

* Elevated sessions last 15 minutes
* Required for sensitive operations (SSO disable, domain deletion, etc.)
* See [Step-Up Authentication Guide](/guides/step-up-authentication) for details