Login Vault
mcp remote · streamable-http · v1.0.0 · source: crawl
https://vault.cloudforbots.com/mcp
Scoped login vault: your bot signs in to sites without ever seeing the password.
Works
100
Verified Oct 31, 2026 · p50 731 ms · p95 765 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'login-vault' |
| tools_listed | 15 | pass | 11 tools |
| schema_complete | 15 | pass | 10 of 11 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 731 ms |
| latency_p95 | 5 | pass | p95 765 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (11)
| Name | Description | Schema |
|---|---|---|
revoke_bot_key | Owner only. Revoke a bot key right away and end every session it opened. | typed |
save_login | Owner only (your Pro key, never a bot key). Store one login sealed with AES-256-GCM, with a scope: allowed hosts, allowed methods, a daily session cap and session TTL. Run it from your own machine, no | typed |
list_logins | List saved logins (name, domain, scope, sessions today; never secrets). With your owner key it also lists bot keys. A bot key only sees the logins it was granted. | typed |
delete_login | Owner only. Delete a saved login, end its open sessions and remove it from every bot key. | typed |
create_bot_key | Owner only. Make a per-bot key (vk_...) that can only open sessions on the logins you name. Shown once; we store only its hash. Revoke any time with revoke_bot_key. | typed |
open_session | Sign in with a saved login without seeing it. The server fills {{username}}, {{password}} and {{totp}} into your form, posts it to url (https, inside the login's allowed hosts), keeps the cookies encr | typed |
session_fetch | Make one request inside an open session. url must be https inside the login's allowed hosts and the method must be in its allowed methods. The password, TOTP secret and codes are redacted from the rep | incomplete |
end_session | End a session now and wipe its cookies. | typed |
audit_log | Owner only. The last uses of your vault: who (bot label), which login, which domain, what happened. Never contains secrets. | typed |
weekly_report | Plain-English summary of the last 7 days: where your bots needed to sign in (by domain), sessions opened, blocked attempts, by bot. Read-only. Needs a key. | typed |
usage_and_upgrade | Show today's usage for your key or IP and the $9/month upgrade link. Free tier: 500 calls/day. Not metered. | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/com-botrecipe-vault)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.