Triggerfish

just that the generated link should log you in as intended.
If that means bypassing 2fa then yes.
If you are able to run wp cli commands you have the rights (is my thought).