Well, in my opinion I dont think so. Currently the only way is if you send otp password via ndef.

Deemer and where's the security of it? The phone reads the nfc stick, and then? Send a response to a server or what? What if the service of the server is not running?

Are there anyone who got the necessary permission from Apple? If yes, then how much time was it?

Do you mean you have gotten any reply or Apple has not granted the certificate for you yet? Because I also want to get the nfc certificate and I emailing with then more than a month, but my request is still in reviewing status.

Hello, I use passes that were generated by my webapp, and there aren’t any charge for it. There is only the apple developer account subscription fee.

Hello! Have found any relevant information?

Technically, you can use Apple VAS for NFC authentication. Can you explain why we can not use VAS for access control systems?

Yes, please check this one: https://github.com/kormax/android-universal-reader