Login Vault

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Scoped login vault: your bot signs in to sites without ever seeing the password.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Login Vault": {
      "url": "https://vault.cloudforbots.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (11)

• save_login

  Owner only (your Pro key, never a bot key). Store one login sealed with AES-256-GCM, with a scope: allowed hosts, allowed methods, a daily session cap and session TTL. Run it from your own machine, not inside the bot. The password and TOTP secret are never returned by any tool. Free watch-only stores nothing and logs would_use_vault.

  Parameters:

  • name (required) — string — Short id, e.g. "github-bot" (letters, digits, . _ - @).
  • domain (required) — string — Site the login belongs to, e.g. github.com.
  • username (required) — string
  • password (required) — string
  • scope — object — Where and how this login may be used.
  • totp_secret — string — Optional base32 TOTP secret, so {{totp}} can fill 2FA codes.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_logins

  List saved logins (name, domain, scope, sessions today; never secrets). With your owner key it also lists bot keys. A bot key only sees the logins it was granted.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• delete_login

  Owner only. Delete a saved login, end its open sessions and remove it from every bot key.

  Parameters:

  • name (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_bot_key

  Owner only. Make a per-bot key (vk_...) that can only open sessions on the logins you name. Shown once; we store only its hash. Revoke any time with revoke_bot_key.

  Parameters:

  • label (required) — string — Which bot, e.g. "invoice-bot".
  • logins (required) — array — Names of saved logins this bot may use.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• revoke_bot_key

  Owner only. Revoke a bot key right away and end every session it opened.

  Parameters:

  • bot_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• open_session

  Sign in with a saved login without seeing it. The server fills {{username}}, {{password}} and {{totp}} into your form, posts it to url (https, inside the login's allowed hosts), keeps the cookies encrypted, and returns an opaque session id. Checked against the login's scope and daily cap; logged to the audit log. If the site shows a CAPTCHA or new-device check, the reply suggests next_step request_human (Human Handoff relay). Free watch-only logs would_use_vault and signs in nowhere.

  Parameters:

  • name (required) — string — Saved login name.
  • url (required) — string — The sign-in endpoint, e.g. https://example.com/session.
  • as — string — Body encoding. Default form.
  • form — object — Fields to send, values may use {{username}}, {{password}}, {{totp}}. Default {"username":"{{username}}","password":"{{password}}"}.
  • method — string — Default POST.
  • prefetch — boolean — GET the url first to pick up CSRF cookies. Default true.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• session_fetch

  Make one request inside an open session. url must be https inside the login's allowed hosts and the method must be in its allowed methods. The password, TOTP secret and codes are redacted from the reply; cookies never leave the vault.

  Parameters:

  • session (required) — string
  • url (required) — string
  • body — String or JSON.
  • method — string
  • headers — object

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• end_session

  End a session now and wipe its cookies.

  Parameters:

  • session (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• audit_log

  Owner only. The last uses of your vault: who (bot label), which login, which domain, what happened. Never contains secrets.

  Parameters:

  • limit — integer — 1-200, default 50.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• weekly_report

  Plain-English summary of the last 7 days: where your bots needed to sign in (by domain), sessions opened, blocked attempts, by bot. Read-only. Needs a key.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• usage_and_upgrade

  Show today's usage for your key or IP and the $9/month upgrade link. Free tier: 500 calls/day. Not metered.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.