Authenticator MCP

What firstorderai/authenticator_mcp MCP server does

The firstorderai/authenticator_mcp MCP server exposes selected data from Authenticator App to an AI agent through Model Context Protocol. It is intended for login workflows where an agent needs to identify an account, retrieve its password, or obtain the current two-factor authentication code.

The server does not appear to store or manage credentials independently. Instead, it connects the agent to the Authenticator App desktop installation, which must be configured to provide MCP access. The repository describes the interaction as a way for an agent to fetch credentials and use them in an automated login process.

How it works

An MCP-compatible client starts the server with the authenticator-mcp npm package. The server receives an access token created in the Authenticator App and uses that authorization to access the app's account data.

A typical workflow is:

1. Open an AI client's integrated chat or agent interface.
2. Ask the agent for the available accounts, a password, or a 2FA code.
3. Let the agent use the returned information in the relevant login workflow.

The README specifically illustrates use with Cursor's agent mode. It does not document equivalent setup instructions for other clients.

Setup and configuration

Before configuring the firstorderai/authenticator_mcp MCP server, install the desktop version of Authenticator App · 2FA on a supported platform. The README provides downloads for Windows, macOS, and Ubuntu/Debian.

In the desktop app, open Settings, find the MCP Server section, enable the MCP Server toggle, and generate an access token. The token is shown only once, so it must be copied when created.

On macOS or Linux, add the server to the MCP client's configuration with npx, using -y and the authenticator-mcp package. The token can be passed with --access-token=... or supplied through the AUTHENTICATOR_ACCESS_TOKEN environment variable. Windows uses the same npm command through cmd /c in the documented example.

The access token is required. A configuration containing neither the command-line token nor the environment variable will not provide the server with the documented authorization.

Tools and capabilities

The firstorderai/authenticator_mcp MCP server provides three MCP tools:

• get_2fa_code: Retrieves the current 2FA code for a username.
• get_password: Retrieves the password associated with a username.
• get_account_list: Retrieves the accounts available for website login.

These tools support account selection and credential retrieval. The provided material does not describe operations for creating, editing, deleting, or importing accounts, nor does it document a general-purpose browser automation tool.

Limitations and notes

The server depends on the Authenticator App desktop version and its locally enabled MCP Server setting. It also depends on a valid access token generated by that application. Because the tools return passwords and 2FA codes to an AI agent, clients should be configured carefully and access tokens should be handled as sensitive credentials.

The documentation does not state a license, paid-service requirement, token expiration policy, supported operating-system details beyond the linked downloads, or compatibility with Claude Desktop, Windsurf, or Cline. It also does not explain how the server handles failed authentication or unavailable accounts.