otplib-cli

otplib-cli

A Command Line tool for OTP operations. It provides stateless, scriptable and storage agnostic tooling.

Installation

npm install -g otplib-cli

Two commands are available:

• otplibx - Includes an encrypted .env based storage
• otplib - Stateless CLI for scripting and custom backends

Quick Start

otplibx

# Initialize secrets file
otplibx init

# Add entry from file or clipboard
cat otp-uri.txt | otplibx add
pbpaste | otplibx add

# Generate token
otplibx token A1B2C3D4

# List entries
otplibx list
otplibx list --filter github

# Interactive selection with fzf
npx otplibx token -n "$(npx otplibx list | fzf | cut -f2)" | pbcopy
# OR
npx otplibx list | fzf | cut -f2 | xargs -I {} npx otplibx token -n {} | pbcopy

otplib

For scripting or custom secret backends, use the stateless otplib CLI.

# Encode an otpauth URI into internal format
cat otp-uri.txt | otplib encode
# Output: A1B2C3D4=eyJkYXRhIjp7...}}

# Store the output in a JSON file (storage.json)
# { "A1B2C3D4": "eyJkYXRhIjp7...}}" }

# Generate token
cat storage.json | otplib token A1B2C3D4

# List entries
cat storage.json | otplib list
cat storage.json | otplib list --filter github

# Verify a token
cat storage.json | otplib verify A1B2C3D4 123456

Commands

otplibx

Command	Description
init [file]	Initialize encrypted secrets file
add	Add entry (reads from stdin)
token [-n] [id]	Generate token
type [-n] [id]	Output entry type
hotp update-counter <id> [n]	Update HOTP counter
verify <id> <token>	Verify token
list [--filter <query>]	List entries
guard update <key> <value>	Update guardrail
guard rm <key>	Remove guardrail
guard show	Show guardrails

Options: -f, --file <path> (default: .env.otplibx)

otplib

Command	Description
encode [--save-uid <file>]	Encode otpauth URI/JSON to internal format
list [-f, --filter <query>]	List entries
token [-n] <id>	Generate token (auto-detect)
type [-n] <id>	Output entry type
hotp update-counter <id> [n]	Update HOTP counter
verify <id> <token>	Verify token
guard show	Show guardrails

Documentation

See the full documentation for detailed usage, architecture, and integration with other secret managers.

License

MIT