monifa

Command-line client for Monifa, the multi-SSO TOTP authenticator.

Install

pip install monifa

The Python module uses the same name:

import monifa

For development:

python -m venv .venv
.venv/bin/pip install -e .

Login

Sign in through the installed Qitian CLI (qt app oauth):

monifa login

Use GitHub Device Flow instead (the CLI displays a short code and opens GitHub):

monifa login --provider github

You can also exchange a Qitian authorization code or an unconsumed Monifa login ticket directly:

monifa login --code 'QITIAN_AUTHORIZATION_CODE'
monifa login --ticket 'https://monifa.jyonn.space/#/auth/callback?ticket=...'

Tokens

Synchronize and show all current codes:

monifa ls

Generate one code by entry ID, issuer, or account name:

monifa code GitHub
monifa code 12

The last synchronized entries remain available offline:

monifa ls --offline
monifa code GitHub --offline

Add an entry:

monifa add --issuer GitHub --account user@example.com --secret JBSWY3DPEHPK3PXP
monifa add --issuer Example --account user --secret SECRET --algorithm SHA256 --digits 8 --period 30

Delete an entry after an interactive confirmation:

monifa rm 12
monifa rm GitHub --yes

Other commands:

monifa sync
monifa whoami
monifa logout

State And Security

The state file is ~/.config/monifa-cli/state.json by default. It contains refresh credentials and a plaintext cache of TOTP secrets so codes remain available offline. The CLI creates it with user-only permissions (0600). Anyone who can read this file can generate the stored MFA codes.

Override the backend, Qitian executable, or state path with MONIFA_BACKEND_URL, MONIFA_QT_COMMAND, and --config. GitHub Device Flow must be enabled for the configured GitHub OAuth App.