A self-hosted TOTP management platform. Generate, manage, and audit one-time passwords from a web dashboard — with a REST API and Slack integration for team use.
AuthFlow is a self-hosted TOTP management platform for generating, managing, and auditing one-time passwords — built for both personal use and team workflows.
Deploy it on Vercel with any PostgreSQL database (Supabase-compatible). Authenticate with email, then manage all your TOTP secrets from a clean web dashboard.
GET /{slug}?key=API_KEY returns JSON or plaintext OTP codes, ready for automation pipelines/otp <slug> slash command posts the current code directly to any channelOTP generation uses the native Web Crypto API (RFC 6238) — no third-party OTP libraries. Secrets are Base32-decoded and fed into HMAC-SHA1 to produce the standard 6-digit codes.
The /{slug} endpoint accepts an Accept header to switch between JSON and plain-text responses, making it easy to pipe OTP codes into shell scripts, CI jobs, or any HTTP-capable tool.