MFA testing infrastructure · SMS · Email · TOTP

MFA testing, made ridiculously easy.

Private phone numbers, inboxes and TOTP keys that forward MFA codes to the people and pipelines you choose. Pass App Store and Google Play reviews, automate end-to-end tests and RPA, and keep MFA switched on in production.

5-DAY FREE TRIAL · NO CREDIT CARD · SET UP IN UNDER 10 MINUTES

Or see how it works first

[ FIG. 1 ] ROUTE A CODECLICK A SOURCE AND A DESTINATIONTAP TO RE-ROUTE

Source

GetMyMFA

PRIVATE SPACE

GET /v1/ph_8f2a/mfa/latest

482913

Sends to

A code is texted to your private number. Your test pulls it from the REST API.

// Playwright: pull the code that just landed
const res = await request.get(`${GMM}/${PHONE_ID}/mfa/latest`);
const { mfaCode } = await res.json();  // "482913"
await page.fill('#otp', mfaCode);

250+

customers shipping with MFA on (Sep 2026)

10+

countries for phone numbers

GET request to read the latest code

channels: SMS, email, TOTP

/01How it works

One private channel. Your rules for who reads it.

Acquire a phone number, an email address or a TOTP key. Codes land in a space only you control, then go exactly where you point them.

Provision a private channel

Buy a virtual phone number, an email address or load a TOTP secret. It is yours alone and stays private.

Decide who can read it

Grant access explicitly: an Apple or Google reviewer, a teammate, a CI service account. Revoke it any time.

Receive codes wherever you work

Read codes in the console, pull them from the REST API in a test, or forward them to Slack and Teams with webhooks.

Full demo through the guided tour

[ FIG. 2 ] APP STORE REVIEW, MFA ONLIVE

App reviewerAPP STORE · GOOGLE PLAY

Your appPRODUCTION · MFA ON

GetMyMFAPRIVATE SPACE

Signs in with the review account
Asks for the 2FA code. MFA stays on.
Texts the code to +33 7 57 90 38 77, your private number
Access check: reviewer@apple.com, read-only until Oct 25
Shows 482913 in the shared console. Nothing else.
Enters 482913. Signed in.
Review passed. No bypass code, no MFA switched off, no shared SIM.
You revoke the reviewer's access. Done.

The reviewer reads one code, in a space you control. Production keeps its MFA, and you keep the keys.

/02Use cases

Stop compromising security to get through review or CI.

No MFA-disabled demo users. No backend switches. Production-identical flows, with MFA on.

iOS · Android

App Store and Google Play review, with 2FA on

App Store
Google Play

Reviewers need to sign in. Give them read-only access to the codes on a private number instead of a security exception. Trusted by 250+ customers (Sep 2026) to get approved.

How app submission works

App Review · notes for reviewer

Demo account: reviewer@acme.app
2FA codes are available in real time at
client.get.mymfa.io/share/8f2a

App Store · Google Play

Shared with · Apple reviewer

LIVE

Last code for +33 7 57 90 38 77

239 079

Received 2s ago · read-only access

RPA · Webhooks

Robotic process automation

Slack
Microsoft Teams
Google Chat

Forward every code to Slack, Teams, Google Chat or your own endpoint. Strong authentication, fully automated, still rock solid.

Read about webhooks

#qa-mfa

GetMyMFAAPP10:03

New code on +33 7 57 90 38 77: 482913

GetMyMFAAPP10:11

New code on qa@acme.mymfa.io: 771205

E2E · CI/CD

End-to-end test automation

Playwright
Cypress
Selenium
GitHub Actions

One GET request returns the latest code for a number, inbox or TOTP token. Drop it into Playwright, Cypress, Selenium or any harness that speaks HTTP. Nothing changes in your backend.

One GET request returns the latest code
One number per parallel worker, no collisions
API keys scoped per environment

Explore the API

import { test, expect } from '@playwright/test';

const GMM = 'https://api.get.mymfa.io/v1';

test('signs in with SMS 2FA', async ({ page, request }) => {
  await page.goto('/login');
  await page.fill('#email', 'qa@acme.app');
  await page.fill('#password', process.env.QA_PASSWORD!);
  await page.click('text=Continue');

  // Pull the code that just landed on our private number
  const res = await request.get(`${GMM}/${process.env.GMM_PHONE_ID}/mfa/latest`, {
    headers: { 'x-api-key': process.env.GMM_API_KEY! },
  });
  const { mfaCode } = await res.json();

  await page.fill('#otp', mfaCode);
  await expect(page).toHaveURL('/dashboard');
});

/03What you get

Built for the people who ship, and the people who test.

On demand

Provision phone numbers from over 10 countries, email addresses or TOTP tokens in seconds.

Shareable

Decide exactly who can read a code: an external reviewer, a teammate, or a CI job.

Private

Every number and address is exclusively yours. Nothing is pooled, nothing is reused.

Automation-friendly

A REST API and webhooks retrieve codes for Playwright, Cypress, Selenium or any RPA bot.

Plug-and-play

Forward codes to Slack, Teams or Google Chat with no backend changes on your side.

Trusted

250+ customers (Sep 2026) rely on GetMyMFA to ship apps and keep MFA switched on in production.

/04Customers

“GetMyMFA is our go-to solution to solve the tricky problem of reviewing and testing our app on the Apple review process and our CI/CD automated tests. Very simple and easy.”

Romaric Haldenwang

CTO, Pyxo

“GetMyMFA is the key service allowing us to submit our iOS app without compromising security. The customer support's speed and quality is one of the best I've seen.”

Cornelis Richter

VP of Engineering, READY Education

/05Pricing

Transparent prices. No hidden fees.

Every account starts with a 5-day free trial, no credit card required. Prices in euros.

Compare every feature

Starter

€0/month

Ideal for app reviews and simple use cases. Pay only for the numbers and inboxes you buy.

Start free trial

Up to 5 virtual phone numbers
Up to 5 email addresses
1 TOTP token
Share with 1 external user
100 SMS per number per month
Unlimited emails

Pro

Enterprise

For teams: webhooks, SSO, access control and custom integrations.

Talk to us

Unlimited numbers, emails and TOTP
Programmatic REST API
Webhook integration (Slack, Teams, HTTP)
Unlimited sharing and SMS
User management
Fine-grained access control
SSO & SCIM integration
Premium support

/06Questions

Frequently asked

Anything missing? Email hello@mymfa.io and we reply within 24 hours.

I need to submit my iOS app and share 2FA codes with Apple reviewers. Does GetMyMFA support this?

Yes. Sharing MFA codes with Apple and Google reviewers is a core use case. You share a production account with trusted reviewers without bypassing security or creating exceptions for the submission process, even on the Starter plan.

My app was rejected because two-factor authentication is enabled. Will GetMyMFA help me get approved?

Absolutely. GetMyMFA was built for this. Register a virtual number as the 2FA number on your test account, share access with reviewers in your review notes, and they read incoming codes in real time.

Can I automate end-to-end tests with MFA and 2FA flows?

Yes. The Pro and Enterprise plans include a REST API to retrieve the latest code for a number, email address or TOTP token. The Enterprise plan adds webhooks to push codes to your own API, Slack or Teams.

Does GetMyMFA support TOTP and authenticator apps like Google Authenticator?

Yes. Inject your TOTP secret into the platform and GetMyMFA generates the rotating 6-digit codes automatically. It works with any authenticator flow, including Google Authenticator, Microsoft Authenticator and Authy.

Which testing frameworks does it work with?

Anything that can make an HTTP request. We publish tutorials for Playwright, Cypress and Selenium, and the API works equally well with Robot Framework, Appium, WebdriverIO or a custom harness.

Can I use GetMyMFA to send SMS messages to my customers?

No. GetMyMFA receives incoming SMS and email and extracts the associated MFA code. We do not provide SMS-sending capabilities.

Is it secure?

Every asset you purchase is exclusively yours and never shared with other customers, which is the key difference from pooled SMS-retrieval services. You control who can read each code.

Is there a free plan?

Every new account starts with a 5-day free trial that includes a temporary virtual number and API access, with no credit card required. After the trial, the Starter plan costs €0 per month and you pay only for the numbers, inboxes or TOTP tokens you buy.

I have another question.

Email hello@mymfa.io and we will reply within 24 hours. We promise.

The central MFA testing platform

Elevate your testing capabilities.

It is time to stop bypassing security and living with misconfigured test environments. Test multi-factor authentication flows safely, from review to CI.

Get started for free Talk to us