No second factor. This account is protected by a password alone. Beamable's password grant exposes no MFA, so enforcing it means a check of our own in the microservice (SECURITY‑ISSUES ISSUE‑008). Until then, treat these credentials as the only thing standing in front of the console.