MCP.Market

OTPilot MCP server

by OTPilot·io.github.OTPilot/otpilot·v0.2.0
No reviews yet

Use your OTPilot accounts (passwords, 2FA codes) to sign in and run commands, without seeing them.

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

0 stars341 downloads/wk

Reviews

Write one

Nobody has reviewed OTPilot yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

OTPilot tools (5, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • browser_login

    OTPilot signs in to the account's website itself (username, password and 2FA code, only on the account's own site) and returns the path of a Playwright storageState file with the signed-in session. Load it in your browser to continue signed in. You never get the credentials.

  • check_request

    Whether the user answered a request that was still waiting (by its id).

  • list_accounts

    The accounts the user allowed this agent to use, with what each allows. Names only, never values.

  • request_access

    Ask the user to let this agent use an account it doesn't have yet (e.g. "github", "staging database"). The user picks it in the OTPilot extension. Waits up to 90 s for the answer.

  • runwrite action

    Runs a shell command with secrets from allowed accounts in its environment, for that process only. env values are references "<account>/<field>" (username, password, totp = a fresh 2FA code, notes, or a custom field's label; "<account>/@file" or a file field's label = the path of a private temporary copy of that file, deleted when the command ends). Returns the exit code and the output with every

Public scan report

scanner v0.1.10 · 2026-10-16 · same rubric, same numbers if you re-run it

1 medium
  • Code scan12 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    dist/extension.js: …join(vendor, file), 'utf8'); return new Function(`${src}\nreturn (${expr});`)(); } export…
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How OTPilot compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 48,255 servers
Tools
5
the typical server has 7
Tools that change things
20%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
341
more than 83% of 12,191 servers with a package

What its tools let an agent do: 4 read · 1 run or deploy

Install OTPilot in Claude Code, Cursor or VS Code

Runs npx -y @otpilot/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add otpilot -- npx -y @otpilot/mcp
Add to Cursor

What the publisher says

From the OTPilot repository's README, as published. We do not edit it. Read it on GitHub

OTPilot

TOTP authenticator for Chrome and Edge — auto-detects 2FA setup pages, saves secrets in one click, and auto-fills codes on login.

Add to Chrome → · otpilot.app

Features

  • Auto-detect 2FA setup — scans pages for otpauth:// URIs and QR codes; offers to save in one click
  • Auto-fill — fills TOTP codes on login pages automatically, or on demand
  • Vault — manage all your accounts with name, email, secret, and URL patterns
  • Master password lock — AES-GCM encrypted vault with 24h / 30-day sessions
  • Local encrypted backup — export and import your vault with a password
  • Cloud sync (Personal plan) — end-to-end encrypted sync across all your devices

AI agents (new in 2.1)

Let Claude Code, Codex, Cursor or any MCP agent sign in and run commands with the accounts you allow — passwords and 2FA codes — without the agent ever seeing them. See mcp/.

npx -y @otpilot/mcp@latest connect

In Claude Code, the plugin adds the server and a skill:

/plugin install otpilot --marketplace OTPilot/OTPilot

Coming soon

  • Firefox and Safari support
  • Team sharing - share TOTP access with teammates without exposing secrets
  • Audit logs

Licenses

If OTPilot saves you time, consider buying me a coffee ☕ — it helps keep the project alive.

Nothing above is checked by us. What we check is on the safety report.

OTPilot: common questions

Is OTPilot MCP server safe?
Mostly: it is graded B (83/100). Read the OTPilot safety report
How do I install OTPilot?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does OTPilot need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is OTPilot maintained?
The last commit was 19 days ago (2026-10-16). The latest release is v0.2.0.
How does OTPilot compare with other MCP servers?
safety score 83/100 (higher than 65% of 48,255 servers); tools 5 (the typical server has 7); tools that change things 20% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.