diff --git a/common/client_types.proto b/common/client_types.proto
index cdd6a4a..3e46a4c 100644
--- a/common/client_types.proto
+++ b/common/client_types.proto
@@ -436,6 +436,10 @@ message MfaConfigAuthorizeResponse {
   repeated string recovery_codes = 2;
 }
 
+message MfaConfigEndRequest {
+  string session_token = 1;
+}
+
 // External OIDC authentication flow
 enum AuthFlowType {
   AUTH_FLOW_TYPE_UNSPECIFIED = 0;
diff --git a/v2/proxy.proto b/v2/proxy.proto
index c9e4743..6eec523 100644
--- a/v2/proxy.proto
+++ b/v2/proxy.proto
@@ -222,6 +222,7 @@ message CoreRequest {
     defguard.client_types.MfaConfigStartRequest mfa_config_start = 24;
     defguard.client_types.MfaConfigAuthorizeRequest mfa_config_authorize = 25;
     defguard.client_types.MfaConfigSendCodeRequest mfa_config_send_code = 26;
+    defguard.client_types.MfaConfigEndRequest mfa_config_end = 27;
   }
 }