totp-mcp-server

Stand up a local MCP server whose only job is handing out current 2FA codes. The agent calls a tool and receives six digits; the seed stays on disk, out of the transcript, and out of every prompt the model ever sees. Fixes the failures that make this go wrong: a bare exception swallowing the error the model needed, anything printed to stdout killing the stdio stream, an unpinned SDK, and a "helpful" tool that can export secrets.

A working server ships in scripts/totp_mcp_server.py — verified against a real MCP client (tools listed, code issued, traversal denied, rate limit enforced).

When NOT to use