Log inSubmit server
Authenticator MCP logo

Authenticator MCP

by firstorderai

Retrieves Authenticator App account lists, passwords, and current 2FA codes for AI-assisted login workflows.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Authenticator MCP

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "firstorderai-authenticator-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "authenticator-mcp"
      ],
      "env": {
        "AUTHENTICATOR_ACCESS_TOKEN": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

We couldn’t confirm it starts correctly

We ran the install command but it didn't respond within our test window — this can mean a slow first-time install rather than a real problem.

npx -y authenticator-mcp

No response to initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 1mo ago.

Overview

The firstorderai/authenticator_mcp MCP server connects AI agents to the Authenticator App for retrieving account details, passwords, and current 2FA codes. It runs locally through the npm package and authenticates requests with an Authenticator App access token. Use it when an agent needs credential data for a supported login workflow, such as from Cursor's agent mode. The desktop Authenticator App must have its MCP Server enabled before the connection can work.

Use cases

  • Retrieve the account list available for a website login
  • Fetch a password for an authenticated login workflow
  • Obtain a current 2FA code during agent-assisted sign-in
  • Connect Cursor agent mode to Authenticator App credentials

Key features

  • Retrieve current 2FA codes by username
  • Retrieve passwords by username
  • List available login accounts
  • Authenticate with an Authenticator App access token
  • Run through the authenticator-mcp npm package

Tools3

What Authenticator MCP lets your agent do. Expand a tool for its parameters.

Verified live~319 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 3d ago

Recent health check succeeded.

18/18 checks healthy over the last 80d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 2d ago via OSV.dev · authenticator-mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars47Stargazers on the source repository.
npm downloads51Package downloads in the last 30 days.
Last commit7mo agoMost recent push to the default branch.
Install checkInconclusiveDidn't respond in our test window — often a slow first install.
Tools exposed3Callable tools this server registers over MCP.
Directory activity3 viewsConfig copies, upvotes, and views on AllMCPs.

How Authenticator MCP works

What firstorderai/authenticator_mcp MCP server does

The firstorderai/authenticator_mcp MCP server exposes selected data from Authenticator App to an AI agent through Model Context Protocol. It is intended for login workflows where an agent needs to identify an account, retrieve its password, or obtain the current two-factor authentication code.

The server does not appear to store or manage credentials independently. Instead, it connects the agent to the Authenticator App desktop installation, which must be configured to provide MCP access. The repository describes the interaction as a way for an agent to fetch credentials and use them in an automated login process.

How it works

An MCP-compatible client starts the server with the authenticator-mcp npm package. The server receives an access token created in the Authenticator App and uses that authorization to access the app's account data.

A typical workflow is:

  1. Open an AI client's integrated chat or agent interface.
  2. Ask the agent for the available accounts, a password, or a 2FA code.
  3. Let the agent use the returned information in the relevant login workflow.

The README specifically illustrates use with Cursor's agent mode. It does not document equivalent setup instructions for other clients.

Setup and configuration

Before configuring the firstorderai/authenticator_mcp MCP server, install the desktop version of Authenticator App · 2FA on a supported platform. The README provides downloads for Windows, macOS, and Ubuntu/Debian.

In the desktop app, open Settings, find the MCP Server section, enable the MCP Server toggle, and generate an access token. The token is shown only once, so it must be copied when created.

On macOS or Linux, add the server to the MCP client's configuration with npx, using -y and the authenticator-mcp package. The token can be passed with --access-token=... or supplied through the AUTHENTICATOR_ACCESS_TOKEN environment variable. Windows uses the same npm command through cmd /c in the documented example.

The access token is required. A configuration containing neither the command-line token nor the environment variable will not provide the server with the documented authorization.

Tools and capabilities

The firstorderai/authenticator_mcp MCP server provides three MCP tools:

  • get_2fa_code: Retrieves the current 2FA code for a username.
  • get_password: Retrieves the password associated with a username.
  • get_account_list: Retrieves the accounts available for website login.

These tools support account selection and credential retrieval.

Limitations and notes

The server depends on the Authenticator App desktop version and its locally enabled MCP Server setting. It also depends on a valid access token generated by that application. Because the tools return passwords and 2FA codes to an AI agent, clients should be configured carefully and access tokens should be handled as sensitive credentials.

The documentation does not state a license, paid-service requirement, token expiration policy, supported operating-system details beyond the linked downloads, or compatibility with Claude Desktop, Windsurf, or Cline. It also does not explain how the server handles failed authentication or unavailable accounts.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Authenticator MCP

Run it through the documented npm command: npx -y authenticator-mcp. Configure the access token with --access-token or AUTHENTICATOR_ACCESS_TOKEN.

In the desktop Authenticator App, open Settings, find MCP Server, enable it, and generate a token. The token is displayed only once.

It provides get_2fa_code, get_password, and get_account_list for retrieving 2FA codes, passwords, and available accounts.

Yes.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewAuthenticator MCP AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/firstorderai-authenticator-mcp?style=directory)](https://allmcps.com/mcp/firstorderai-authenticator-mcp)
HTML Embed
<a href="https://allmcps.com/mcp/firstorderai-authenticator-mcp"><img src="https://allmcps.com/api/badge/firstorderai-authenticator-mcp?style=directory" alt="Authenticator MCP on AllMCPs" /></a>