ProvenPin Install

otplib TOTP and HOTP generate and verify: working versions (tested 2026-10-15)

Generate secrets and verify TOTP/HOTP codes with otplib functional API fully offline.

passed3 passed · 0 failed2026-10-15 20:57 UTC
Status
passed
Last passed
2026-10-15 20:57 UTC
Tests
3 / 3
Language
TypeScript
Runtime
node v22.23.3
pinned versions3
otplib@13.5.0@types/node@26.6.5tsx@4.23.15
run it
npm install --no-audit --no-fund --ignore-scripts=false
npm test
test environment
node v22.23.3
linux 6.17.0-1022-azure
x64
runner: github-actions 38805962781

The code

Exactly the files that passed. Your agent can pull them with get_recipe("otplib-totp-hotp") (install), or see them on GitHub.

package.json
{
  "name": "otplib-totp-hotp",
  "private": true,
  "type": "module",
  "scripts": {
    "test": "node --import tsx --test test/*.test.ts"
  },
  "dependencies": {
    "otplib": "13.5.0"
  },
  "devDependencies": {
    "@types/node": "26.6.5",
    "tsx": "4.23.15"
  }
}
src/otp.ts
import { generateSecret, generateSync, verifySync, generateURI } from "otplib";

export function newSecret() {
  return generateSecret();
}

export function totpNow(secret: string) {
  return generateSync({ secret, strategy: "totp" });
}

export function verifyTotp(secret: string, token: string) {
  return verifySync({ secret, token, strategy: "totp" });
}

export function hotpAt(secret: string, counter: number) {
  return generateSync({ secret, strategy: "hotp", counter });
}

export function verifyHotp(secret: string, token: string, counter: number) {
  return verifySync({ secret, token, strategy: "hotp", counter });
}

export function authUri(secret: string) {
  return generateURI({
    issuer: "ProvenPin",
    label: "[email protected]",
    secret,
  });
}
test/otp.test.ts
import { test } from "node:test";
import assert from "node:assert/strict";
import { authUri, hotpAt, newSecret, totpNow, verifyHotp, verifyTotp } from "../src/otp.ts";

test("totp generate and verify", () => {
  const secret = newSecret();
  const token = totpNow(secret);
  assert.match(token, /^\d{6}$/);
  const result = verifyTotp(secret, token);
  assert.equal(result.valid, true);
});

test("hotp generate and verify at counter", () => {
  const secret = newSecret();
  const token = hotpAt(secret, 3);
  assert.equal(verifyHotp(secret, token, 3).valid, true);
  assert.equal(verifyHotp(secret, token, 4).valid, false);
});

test("otpauth uri includes issuer", () => {
  const uri = authUri(newSecret());
  assert.match(uri, /^otpauth:\/\/totp\//);
  assert.match(uri, /issuer=ProvenPin/);
});

Connect to ProvenPin

Add the free MCP server so your agent can pull this recipe and others like it. Same setup as the docs.

terminal
claude mcp add --transport http provenpin https://mcp.provenpin.com/mcp

Any other MCP client: Streamable HTTP at https://mcp.provenpin.com/mcp. No API key, no signup.