api.auth.mfa.removeAuthenticator

Remove one authenticator app. Its codes stop working immediately; the rest keep working. Needs a session that has passed MFA.

The last remaining app can't be removed — that would leave the account with no way to answer an MFA challenge. Enroll a second one first, and only offer the remove control once listAuthenticators() returns more than one.

const apps = await api.auth.mfa.listAuthenticators();
for (const app of apps.slice(1)) {
  await api.auth.mfa.removeAuthenticator(app.id);
}

Returns: Promise<void>. Rejects with InvalidRequest when it's the only app left.

REST endpoint: DELETE /auth/mfa/authenticators/{id}.