English Français العربية

OTPilot

Official registry Other

Use your OTPilot accounts (passwords, 2FA codes) to sign in and run commands, without seeing them.

Source code Website Documentation

What can you do with OTPilot?

  • Auto-detect 2FA setup — scans pages for otpauth:// URIs and QR codes; offers to save in one click
  • Auto-fill — fills TOTP codes on login pages automatically, or on demand
  • Vault — manage all your accounts with name, email, secret, and URL patterns
  • Master password lock — AES-GCM encrypted vault with 24h / 30-day sessions
  • Local encrypted backup — export and import your vault with a password
  • Cloud sync (Personal plan) — end-to-end encrypted sync across all your devices

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package @otpilot/mcp
Claude Code 
claude mcp add otpilot -- npx -y @otpilot/mcp@0.2.0
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "otpilot": {
            "command": "npx",
            "args": [
                "-y",
                "@otpilot/mcp@0.2.0"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. OTPilot
  2. Features
  3. AI agents (new in 2.1)
  4. Licenses

OTPilot

TOTP authenticator for Chrome and Edge — auto-detects 2FA setup pages, saves secrets in one click, and auto-fills codes on login.

**Add to Chrome →** · **otpilot.app**

Features

  • Auto-detect 2FA setup — scans pages for otpauth:// URIs and QR codes; offers to save in one click
  • Auto-fill — fills TOTP codes on login pages automatically, or on demand
  • Vault — manage all your accounts with name, email, secret, and URL patterns
  • Master password lock — AES-GCM encrypted vault with 24h / 30-day sessions
  • Local encrypted backup — export and import your vault with a password
  • Cloud sync (Personal plan) — end-to-end encrypted sync across all your devices

AI agents (new in 2.1)

Let Claude Code, Codex, Cursor or any MCP agent sign in and run commands with the accounts you allow — passwords and 2FA codes — without the agent ever seeing them. See mcp/.

npx -y @otpilot/mcp@latest connect

In Claude Code, the plugin adds the server and a skill:

/plugin install otpilot --marketplace OTPilot/OTPilot

Coming soon

  • Firefox and Safari support
  • Team sharing - share TOTP access with teammates without exposing secrets
  • Audit logs

Licenses

DirectoryLicense
extension/GPL v3
api/AGPL v3
web/MIT
mcp/GPL v3

If OTPilot saves you time, consider buying me a coffee ☕ — it helps keep the project alive.

Frequently asked questions

What is OTPilot?

Use your OTPilot accounts (passwords, 2FA codes) to sign in and run commands, without seeing them.

How do I install OTPilot?

It runs on your machine. In Claude Code: claude mcp add otpilot -- npx -y @otpilot/mcp@0.2.0. For other clients, paste the JSON configuration from this page into their MCP settings.

Does OTPilot need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is OTPilot open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains OTPilot?

It is published by OTPilot. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.