Small, sharp tools that fell out of the work.

Forge Nord builds its own operating layer first. When one of those internal fixes solves a real problem cleanly enough to stand on its own, we ship it publicly.

Selection rule

We only publish tools that survived contact with actual use inside the company. The bar is not “interesting idea.” The bar is “we needed this.”

Open source · Security · MCP Launched · v0.2.0

Agent Authenticator

A self-hostable TOTP vault for AI agents.

Generate 2FA codes on demand without handing the model the underlying seed. Built for the exact moment where an agent can do the work, but login still breaks on an authenticator prompt.

This came directly out of Forge Nord's own operating friction. Agents can browse, code, deploy, and coordinate, but most 2FA flows still assume a human with a phone. The wrong fix is to paste a long-lived secret into a prompt. This project is the narrow, safer alternative.

  • Encrypted vault at rest with a tool surface that returns the code, never the seed.
  • Safer defaults: stdio first, loopback-only HTTP by default, explicit opt-in for remote bind.
  • Built for real MCP clients like Claude Code and Cursor instead of as a generic secrets manager.