PassTunnel MCP server

PassTunnel

Connect your VPN without ever typing a one-time code again.

PassTunnel is an open-source macOS app for OpenVPN and FortiGate SSL VPN. It keeps your TOTP secret in the Keychain and fills in the current code (and your password) every time you connect.

Website · Features · Install · Quick start · Code format · CLI · AI assistants · FAQ · Security · Türkçe

Features

One-time codes, handled

code and sends it with your password when you click Connect. If fewer than 8 seconds are left in the current window, it waits for a fresh code instead of racing the clock.

• No more typing codes. The TOTP secret lives in the macOS Keychain; PassTunnel generates the

template with any literal text, or send the code separately (OpenVPN static challenge, FortiGate OTP field). See Configuring the code format.

• Any format your server expects. Append, prepend, password:code, password,code, or a custom

countdown ring. Click to copy; the clipboard is cleared again after 30 seconds. Codes can be hidden until copied.

• Authenticator-style main window. Every profile shows its live code in large digits with a

clipboard. Digits, period and algorithm (SHA-1/256/512) are read from the otpauth:// link. Pasting a Base32 secret or an otpauth:// link works too.

• QR import. Drop a screenshot of your provider's QR code, choose an image or paste from the

the focused field (also in the menu bar menu), for web portals and other places that still ask for it. Needs Accessibility permission, which is only requested when you turn the feature on.

• Auto-type (optional, off by default). With global shortcuts on, ⌃⌥C types the current code into

or also before showing codes; the saved secrets are then encrypted with a key in the Mac's Secure Enclave, so a one-click connect needs you, not just your unlocked Mac.

• Confirm with Touch ID (optional, per profile). Touch ID or your Mac password before connecting,

VPN client

Shortened. The full README is on GitHub.