[Feature] implement 2fa with autenticator code (google autenticator\ authy...)

[LudovicoPapaliaWork]

What problem does this solve?

Safety. In partiular for the web interface but also for the api
Particullary urgent for admin settings

It's quite easy to implement two-factor authentication with systems that use a common key (like Google Authenticator or Authy) and it would greatly improve privacy, especially for admin settings.

[Ludv1c0]

@claude could you please implement this Safety feature

[DmitriyG228]

Hi @LudovicoPapaliaWork — appreciated the security-posture framing.

Authentication on Vexa-ai/vexa today is API-key based (header-based bearer tokens, configurable per-deployment). 2FA / TOTP support isn't on the near-term roadmap for the OSS codebase, but worth tracking — your use case helps us scope when to prioritize. Attaching to milestone 0.12.

Quick clarifying question, just for prioritization: is the 2FA need primarily for hosted vexa.ai admin access, or for OSS-self-host admin UIs? And is this driven by a specific compliance requirement (SOC2 / ISO27001 / GDPR-Art-32) you're scoping against?

Answers help us route correctly between hosted-platform 2FA (different layer) and OSS-codebase auth extension.

— Dmitry