# Two Fa Code Tester — MCP tool `findutils:two_fa_code_tester`

Compute the current TOTP code (RFC 6238) for a base32 secret and return the code, the seconds remaining in the window, and — when a code is supplied — whether it matches. Defaults match Google Authenticator: 6 digits, 30-second period, HMAC-SHA1. Pass "time" (unix seconds) to evaluate a specific moment.

- Category: security
- MCP server: https://mcp.findutils.com/ (Streamable HTTP, no API keys, 120 req/min per IP)
- REST endpoint: POST https://api.findutils.com/api/tools/two-fa-code-tester/execute (no API keys, 60 req/min per IP)
- Reference page: https://findutils.com/mcp/two-fa-code-tester/
- Same tool on the other surface: https://findutils.com/api/two-fa-code-tester/

## Connect

```bash
claude mcp add findutils --transport http https://mcp.findutils.com/
```

Claude Desktop (`claude_desktop_config.json`):

```json
{
  "mcpServers": {
    "findutils": {
      "url": "https://mcp.findutils.com/"
    }
  }
}
```

## Call the tool (verified example)

```bash
curl -X POST https://mcp.findutils.com/ \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/call",
    "params": {
      "name": "two_fa_code_tester",
      "arguments": {
        "secret": "JBSWY3DPEHPK3PXP"
      }
    }
  }'
```

## Input schema

| Argument | Type | Required | Description |
|---|---|---|---|
| `secret` | string | yes | The base32 TOTP secret (e.g. JBSWY3DPEHPK3PXP). Spaces, dashes, and padding are ignored. |
| `code` | string | no | Optional code to verify against the computed one. |
| `digits` | integer | no | Number of digits. Default: 6. Default: `6`. |
| `period` | integer | no | Time step in seconds. Default: 30. Default: `30`. |
| `time` | integer | no | Unix timestamp (seconds) to compute the code for. Default: now. |
| `algorithm` | string (SHA-1 \| SHA-256 \| SHA-512) | no | HMAC hash. Default: SHA-1. Default: `"SHA-1"`. |

Example arguments (verified):

```json
{
  "secret": "JBSWY3DPEHPK3PXP"
}
```

## Also a REST endpoint

```bash
curl -X POST https://api.findutils.com/api/tools/two-fa-code-tester/execute \
  -H "Content-Type: application/json" \
  -d '{
    "secret": "JBSWY3DPEHPK3PXP"
  }'

# Parameter schema
curl https://api.findutils.com/api/tools/two-fa-code-tester
```

Full REST reference: https://findutils.com/api/two-fa-code-tester/ · OpenAPI 3.1 spec: https://findutils.com/api/openapi.json

---
Full catalog: POST https://mcp.findutils.com/ with method `tools/list` · https://findutils.com/mcp/ · https://findutils.com/llms.txt