The MfaRecoveryCodesResponseDto object

{
  "recovery_codes": [
    "ABCD-EFGH-IJKL-MNOP",
    "QRST-UVWX-YZ23-4567",
    "..."
  ],
  "recovery_codes_generation": 0
}

recovery_codesstring[]*
Ten freshly-minted single-use codes. **Shown exactly once** — the prior generation is invalidated in the same call and the server only stores hashes from here on.
recovery_codes_generationnumber*
Monotonically-increasing generation number for this batch. Used by the portal admin surface to show "X of 10 remaining" against the current batch.