Login Vault

com.botrecipe/vaultVersion 1.0.0

Scoped login vault: your bot signs in to sites without ever seeing the password.

Status

Responds302 msNov 14, 2026, 13:49 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 13:49 UTC
Latency: 302 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://vault.cloudforbots.com/mcpResponds302 msNov 14, 2026, 13:49 UTC

No sign-in

Claude Code

claude mcp add --transport http vault https://vault.cloudforbots.com/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: vault
Remote MCP server URL: https://vault.cloudforbots.com/mcp

Cursor

{
  "mcpServers": {
    "vault": {
      "url": "https://vault.cloudforbots.com/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"vault","type":"http","url":"https://vault.cloudforbots.com/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

11 tools

Tools of Login Vault
	Description		Read-only	Idempotent	Open world
`audit_log`Owner only. The last uses of your vault: who (bot label), which login, which domain, what happened. Never contains secrets.	Owner only. The last uses of your vault: who (bot label), which login, which domain, what happened. Never contains secrets.	Not declared	Not declared	Not declared	Not declared
`create_bot_key`Owner only. Make a per-bot key (vk_...) that can only open sessions on the logins you name. Shown once; we store only its hash. Revoke any time with revoke_bot_key.	Owner only. Make a per-bot key (vk_...) that can only open sessions on the logins you name. Shown once; we store only its hash. Revoke any time with revoke_bot_key.	Not declared	Not declared	Not declared	Not declared
`delete_login`Owner only. Delete a saved login, end its open sessions and remove it from every bot key.	Owner only. Delete a saved login, end its open sessions and remove it from every bot key.	Not declared	Not declared	Not declared	Not declared
`end_session`End a session now and wipe its cookies.	End a session now and wipe its cookies.	Not declared	Not declared	Not declared	Not declared
`list_logins`List saved logins (name, domain, scope, sessions today; never secrets). With your owner key it also lists bot keys. A bot key only sees the logins it was granted.	List saved logins (name, domain, scope, sessions today; never secrets). With your owner key it also lists bot keys. A bot key only sees the logins it was granted.	Not declared	Not declared	Not declared	Not declared
`open_session`Sign in with a saved login without seeing it. The server fills {{username}}, {{password}} and {{totp}} into your form, posts it to url (https, inside the login's allowed hosts), keeps the cookies encrypted, and returns an opaque session id. Checked against the login's scope and daily cap; logged to the audit log. If the site shows a CAPTCHA or new-device check, the reply suggests next_step request_human (Human Handoff relay). Free watch-only logs would_use_vault and signs in nowhere.	Sign in with a saved login without seeing it. The server fills {{username}}, {{password}} and {{totp}} into your form, posts it to url (https, inside the login's allowed hosts), keeps the cookies encrypted, and returns an opaque session id. Checked against the login's scope and daily cap; logged to the audit log. If the site shows a CAPTCHA or new-device check, the reply suggests next_step request_human (Human Handoff relay). Free watch-only logs would_use_vault and signs in nowhere.	Not declared	Not declared	Not declared	Not declared
`revoke_bot_key`Owner only. Revoke a bot key right away and end every session it opened.	Owner only. Revoke a bot key right away and end every session it opened.	Not declared	Not declared	Not declared	Not declared
`save_login`Owner only (your Pro key, never a bot key). Store one login sealed with AES-256-GCM, with a scope: allowed hosts, allowed methods, a daily session cap and session TTL. Run it from your own machine, not inside the bot. The password and TOTP secret are never returned by any tool. Free watch-only stores nothing and logs would_use_vault.	Owner only (your Pro key, never a bot key). Store one login sealed with AES-256-GCM, with a scope: allowed hosts, allowed methods, a daily session cap and session TTL. Run it from your own machine, not inside the bot. The password and TOTP secret are never returned by any tool. Free watch-only stores nothing and logs would_use_vault.	Not declared	Not declared	Not declared	Not declared
`session_fetch`Make one request inside an open session. url must be https inside the login's allowed hosts and the method must be in its allowed methods. The password, TOTP secret and codes are redacted from the reply; cookies never leave the vault.	Make one request inside an open session. url must be https inside the login's allowed hosts and the method must be in its allowed methods. The password, TOTP secret and codes are redacted from the reply; cookies never leave the vault.	Not declared	Not declared	Not declared	Not declared
`usage_and_upgrade`Show today's usage for your key or IP and the $9/month upgrade link. Free tier: 500 calls/day. Not metered.	Show today's usage for your key or IP and the $9/month upgrade link. Free tier: 500 calls/day. Not metered.	Not declared	Not declared	Not declared	Not declared
`weekly_report`Plain-English summary of the last 7 days: where your bots needed to sign in (by domain), sessions opened, blocked attempts, by bot. Read-only. Needs a key.	Plain-English summary of the last 7 days: where your bots needed to sign in (by domain), sessions opened, blocked attempts, by bot. Read-only. Needs a key.	Not declared	Not declared	Not declared	Not declared

Details

Registry status: Active
Published: Oct 16, 2026
Updated: Oct 16, 2026
Website: https://vault.cloudforbots.com/⁠ (opens in a new tab)
Repository: Not given
Categories: Uncategorized
GDPR: Not declared

Are you the operator? Claim this listing