Based on the provided knowledge sources, there is no explicit documentation or API reference that describes a built-in way in Ory Kratos to distinguish between an initial TOTP setup and a reconfiguration (such as resetting or re-enrolling TOTP) at the API or configuration level. The documentation covers how to enable and configure TOTP, how TOTP credentials are stored in the identity object, and how to display the relevant information in the UI or identity schema. However, it does not mention any mechanism, event, or flag that differentiates the very first TOTP setup from subsequent reconfigurations or resets. The TOTP credential is simply added to the identity's credentials object when enabled, and the process for pairing a TOTP app is the same for both initial setup and reconfiguration scenarios from the user's perspective [Time-based one-time passwords (TOTP)](https://www.ory.sh/docs/kratos/mfa/totp#identity-credentials). If you need to distinguish between these two cases, you may need to implement custom logic outside of Ory Kratos, such as tracking TOTP setup events in your application or using webhooks to monitor changes to the identity's credentials. I'm sorry, but the knowledge sources do not contain enough information to confirm a built-in way to distinguish between initial TOTP setup and reconfiguration in Ory Kratos.