{"service":"totp-auth-api","version":"1.0.0","description":"TOTP/HOTP two-factor auth: generate secrets + otpauth URIs, issue & verify codes (RFC 6238 / 4226), mint backup codes. Stateless, no storage.","endpoints":["/v1/secret","/v1/uri","/v1/parse-uri","/v1/totp","/v1/verify","/v1/hotp","/v1/backup-codes","/health","/version","/openapi.json"],"docs":"POST /v1/secret to start. Then /v1/totp to issue and /v1/verify (with a window) to check."}