diff --git a/strix/interface/cloud/spec.py b/strix/interface/cloud/spec.py
index 1ec85c36..ab2235a1 100644
--- a/strix/interface/cloud/spec.py
+++ b/strix/interface/cloud/spec.py
@@ -91,7 +91,7 @@ _TEST_USER_ADD_BODY = (
     P("password", help="Sign-in password."),
     P("notes", help="Free-form notes for the agents."),
     P("login_url", help="URL of the sign-in page."),
-    P("mfa_method", help="MFA method, for example totp or email."),
+    P("mfa_method", help="MFA method: none, totp, email_otp, or magic_link."),
     P("totp_secret", help="TOTP secret for MFA sign-in."),
     P("mfa_email", help="Email address that receives MFA codes."),
     P("scope_domain_ids", "list", help="Domain IDs where this user applies."),
@@ -103,7 +103,7 @@ _TEST_USER_BODY = (
     P("password", help="Sign-in password."),
     P("notes", help="Free-form notes for the agents."),
     P("login_url", help="URL of the sign-in page."),
-    P("mfa_method", help="MFA method, for example totp or email."),
+    P("mfa_method", help="MFA method: none, totp, email_otp, or magic_link."),
     P("totp_secret", help="TOTP secret for MFA sign-in."),
     P("mfa_email", help="Email address that receives MFA codes."),
     P("scope_domain_ids", "list", help="Domain IDs where this user applies."),
diff --git a/tests/test_cloud_cli.py b/tests/test_cloud_cli.py
index 43184bf5..5877ff1d 100644
--- a/tests/test_cloud_cli.py
+++ b/tests/test_cloud_cli.py
@@ -1258,6 +1258,12 @@ def test_corrected_help_distinguishes_inboxes_reports_and_self_hosted_commands()
     inbox = SPEC["domains"]["test-users provision-inbox"]
     assert "does not create a test user" in inbox.help
 
+    for command_name in ("test-users add", "test-users update"):
+        parameters = {param.name: param.help for param in SPEC["domains"][command_name].body}
+        assert "email_otp" in parameters["mfa_method"]
+        assert "magic_link" in parameters["mfa_method"]
+        assert " or email." not in parameters["mfa_method"]
+
     report = {param.name: param.help for param in SPEC["scans"]["report"].query}
     assert "Report content" in report["format"]
     assert "file type" in report["type"]