Settings groups account-level configuration: your profile, security (password and MFA), the hardware quotas your account is authorised to use, and account deletion.
Multi-factor authentication
Lyceum Cloud supports TOTP-based multi-factor authentication using any standard authenticator app (1Password, Google Authenticator, Authy, etc.) plus a set of one-time backup codes for recovery.
The flow is:
- Enrol —
POST /mfa/enroll returns a secret and a qr_code_url for your authenticator app, plus a set of backup codes you should save somewhere safe
- Confirm —
POST /mfa/verify-enrollment with a code from the app activates MFA on your account
- Sign in — From now on, sign-in requires both your password and a current TOTP code (or one of your backup codes)
If you lose your authenticator, use a backup code to sign in, then regenerate the codes via POST /mfa/regenerate-backup-codes (which invalidates all the old ones).
| Method | Endpoint | Purpose |
|---|
GET | /mfa/status | Check enrolment status |
POST | /mfa/enroll | Start enrolment |
POST | /mfa/verify-enrollment | Confirm enrolment |
POST | /mfa/verify | Verify a code during login |
POST | /mfa/disable | Disable MFA (requires a current code) |
POST | /mfa/regenerate-backup-codes | Generate new backup codes |
Quotas
Your account has a quota for each hardware profile. By default new accounts can launch CPU machines; GPU access is granted by Lyceum based on your usage and any agreements in place. Quotas exist to prevent accidental over-spend and to keep capacity available for everyone.
| Method | Endpoint | Returns |
|---|
GET | /user/quotas | Boolean per hardware profile |
GET | /user/quotas/available-hardware | Just the profiles you can launch right now |
If you need a profile you don’t have access to, contact info@lyceum.technology.
Account lifecycle
| Method | Endpoint | Purpose |
|---|
GET | /user/status | Current user profile |
DELETE | /user/delete | Permanently delete your account |
Account deletion is irreversible. It removes your runs, VMs, deployments, storage, secrets, API keys, and billing history. Export anything you want to keep first.