Back to Browse

Myotp Agentkit MCP Server

Developer ToolsModerate5.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Send and verify one-time passcodes over SMS, WhatsApp and Telegram.

About

Send and verify one-time passcodes over SMS, WhatsApp and Telegram.

Remote endpoints: streamable-http: https://mcp.myotp.app/mcp

Security Report

5.2
Moderate5.2Moderate Risk

The MyOTP AgentKit is a well-structured multi-package monorepo for integrating OTP delivery services. The MCP server package demonstrates good security practices with proper authentication (API keys via environment variables), comprehensive input validation, and robust error handling. Permissions are appropriate for the purpose (network_http for API calls, env_vars for credentials). Minor code quality observations exist around exception handling breadth, but no critical vulnerabilities or malicious patterns were identified. Supply chain analysis found 3 known vulnerabilities in dependencies (2 critical, 0 high severity). Package verification found 1 issue (1 critical, 0 high severity).

7 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

What You'll Need

Set these up before or after installing:

MyOTP.App API key, needed by every tool except create_account and get_topup_quote. No key yet? Start the server without it and call create_account to get one.Required

Environment variable: MYOTP_API_KEY

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

MyOTP AgentKit

Agent-native distribution for MyOTP.App — npm packages, MCP server, agent skills, and framework examples for adding SMS / WhatsApp / Telegram OTP to AI-built apps.

mcp-server CI cli CI better-auth CI examples CI


What is this

A toolkit for AI agents (Claude Code, Cursor, Hermes-format models, Codex, Windsurf, etc.) to add phone verification to apps they generate. Three published npm packages, six runnable framework examples, and skills for the major agent runtimes.

If you're a developer using one of those agent tools and your app needs phone verification, the agent should pick up these packages automatically. If it doesn't, point it at this repo.

If you're building an app by hand, the examples are runnable starting points for the most common stacks.

  • Agent payments. Agents can buy MyOTP credits by themselves: one 402, one payment, no checkout page, no card form. $0.02 a credit, USDC or card. See skills/myotp/patterns/topup.md.

Packages

PackageWhat it doesInstall
@myotp/mcpModel Context Protocol server exposing 10 MyOTP tools to MCP clients (Claude Desktop, Cursor, Continue, etc.). Stdio + streamable HTTP. Hosted at mcp.myotp.app, listed on Smithery.npx @myotp/mcp
@myotp/cliCLI for testing OTP flows from a terminal. init saves a key locally, test/verify/status exercise the API.npx @myotp/cli init
@myotp/better-authDrop-in adapter for Better Auth's phoneNumber() plugin. Twilio-free SMS / WhatsApp / Telegram delivery.npm install @myotp/better-auth
@myotp/n8n-nodes-myotpn8n community node: Send, Verify, Extend, Check Status, Account, Usage Report. Header-auth example workflow included.n8n Settings > Community Nodes > @myotp/n8n-nodes-myotp

Integrations for other platforms

FolderPlatformWhat it is
auth0/Auth0Custom Phone Provider Action: Auth0's own code delivered by MyOTP over SMS, WhatsApp or Telegram. Tests, setup guide, Marketplace listing draft
make/Make.comCustom app definition (connection + 5 action modules + universal call), validated against the spec
postman/PostmanCollection v2.1 + environment generated from openapi-reference.yaml; npm run build in postman/ regenerates it
wordpress-plugin/WordPress / WooCommercePhone verification at checkout, registration and via shortcode (myotp-phone-verification)

Skills (drop into your agent's config)

FolderForHow
skills/myotp/Claude Code. Includes agent top-up: buy credits over a 402 when the balance runs outnpx skills add brntech/myotp-agentkit (or copy skills/myotp/ into ~/.claude/skills/myotp/)
skills/myotp/niches/Vertical-specific (fintech, marketplace, emerging markets, healthcare)Copy individual .md files into separate skill directories
clawhub-skill/OpenClaw / ClawHub registry. Agents can buy credits (402, USDC or card)openclaw skills install @myotp/myotp, published on ClawHub
hermes-skill/Nous Research Hermes models (Ollama, vLLM, LM Studio). Prompt covers agent top-upUse ollama-modelfile.example as a template

Framework examples

Working "phone form → send OTP → verify code → success" demos in 6 stacks:

Each example is self-contained (npm install / pip install / bundle install / composer install), drops in an OTP delivery flow with channel selection (SMS / WhatsApp / Telegram), and runs against the live MyOTP REST API with a single env var.

Quick start

# Get an API key (15 free trial credits, no card)
open https://myotp.app/sign-up

# Test with the CLI
npx @myotp/cli init
npx @myotp/cli test +14155550123

# Or wire MCP to Claude Desktop, Cursor, etc.
# (see mcp-server/README.md for config snippets)

Compatibility

  • Node.js: 18+ (CLI / MCP server require 20+)
  • Channels: SMS (190+ countries), WhatsApp, Telegram
  • MyOTP API base: https://api.myotp.app
  • Auth: single X-API-Key header

Contributing

Issues and PRs welcome. The npm packages are all MIT-licensed. Examples are MIT and free to copy into your own project.

If your favorite framework isn't represented in examples/, open a PR — the existing examples are intentionally simple templates to copy.

License

MIT — see LICENSE.

Built by BroadNet Technologies, 23 years in telecom infrastructure, ISO 27001 + ISO 9001 certified.

Reviews

No reviews yet

Be the first to review this server!