a vault your agents can use.

otto logs your coding agents into websites and Mac apps, enters 2FA codes, fills cards at checkout and runs sudo, on rules you set. the passwords stay on your Mac, out of the chat.

download otto version 0.1.0, for macOS 26 or later

otto's window: logins down the side, and the activity of agents using them, like claude filling the Stripe login and codex getting a 2FA code for Vercel

your agent hit a login page, so you pasted hunter2 into the chat. now it's in a transcript, on someone else's computer, for good.

with otto, the agent asks, otto fills it in, and the password stays on your Mac.

saving a login

the agent asks, you type it in. from then on it can use the login, and never see it.

claude needs your github login: a window where you type the username, password and 2FA, with claude's reason

only on its own sites

a login fills on the sites it belongs to. for a new one, you type the domain to allow it.

claude wants to use your AWS login on a new site, eu-north-1.signin.aws.amazon.com, and you type amazon.com to allow it

a rule for each login

auto, Touch ID, never, or bypass while you're away. every use is logged.

who can use a login in otto: Auto, Touch ID, Never or Bypass, and an optional limit to some projects or agents

2FA codes

otto keeps the authenticator secret and fills in the code. agents only ever see six digits.

a GitHub login in otto, showing its 2FA code 158 245 and the seconds it has left

commands you decide on

the agent shows you the exact command, where it runs and why. you allow it once, with Touch ID.

claude wants to run a command: sudo networksetup to switch the Wi-Fi DNS, with claude's reason under it and an Allow button with Touch ID

bypass

away from the Mac? agents use one login without asking, for as long as you choose.

claude wants bypass for your Hetzner login: what agents could do without asking, what stays true, and how long it lasts
otto's page on a phone: let claude fill Stripe's login? with boxes for the 6-digit PIN, and Allow and Don't allow

from your phone

away from your Mac? tell your agent, and it sends you a link instead of waiting at the Mac. you open it on your phone and answer with your PIN.

the page runs on your Mac and is reachable only over your own Tailscale network, from your own devices. it isn't on the internet, and nothing passes through a server of ours.

and also

cards
fills the checkout after your Touch ID, payment frames included. never presses pay.
sudo
gives sudo your Mac password, for a command you've seen and allowed.
API keys
go to the program the agent runs, as environment variables, not to the agent.
importing
from Apple Passwords, Chrome, 1Password, Bitwarden and others, 2FA secrets included.

it stays on your Mac

there's no otto account and no otto server. the vault is a standard KeePass file on your Mac, and its key is in your keychain.

setting it up

  1. download otto and drag it into Applications.

  2. add the extension to Chrome, Brave, Edge, Arc, Dia, Helium, Vivaldi, Opera, Comet or ChatGPT Atlas. using another browser? ask for it.

  3. connect your agents in otto's settings: Claude Code, Codex, Cursor, Gemini CLI, Windsurf, opencode, T3 Code, the Claude app. anything else that speaks MCP can run otto mcp.

  4. bring your logins from your old password manager.

otto's icon

trust your agents the no-trust way.

download otto version 0.1.0, for macOS 26 or later