Two-Factor Auth

local

otp-tools

Generate TOTP secrets + otpauth URIs (QR-friendly), produce the current 6-digit code, and verify user-submitted codes.

Included in every Nova Skills API key. Nothing to install — get a bearer token and this skill is available on your MCP endpoint.

Tools (3)

  • otp_generate_secret
    Generate a fresh TOTP secret and matching provisioning URI (otpauth://...) that scans into Google Authenticator / Authy.
  • otp_current_token
    Generate the current TOTP code from an existing base32 secret. Also returns the seconds remaining on this token.
  • otp_verify
    Verify a TOTP token against a secret. Tolerates ±1 window drift by default.