Login Vault MCP Server

by botrecipe Your server? Claim it

answering

Scoped login vault: your bot signs in to sites without ever seeing the password.

Uptime history 27 days of history · worst day 43%

27 days agonow

48.9%

Uptime 24h

45 of 92 checks

Tools

read from the server

347 ms

Response time

average over 24h

open, no key

Access

streamable-http

Login Vault does not always answer

Over the last week it answered 52.3% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 3 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add vault --transport http https://vault.cloudforbots.com/mcp

Settings → Connectors → Add custom connector, then paste this address

https://vault.cloudforbots.com/mcp

~/.codex/config.toml

[mcp_servers.vault]
url = "https://vault.cloudforbots.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "vault": {
      "url": "https://vault.cloudforbots.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "vault": {
      "type": "http",
      "url": "https://vault.cloudforbots.com/mcp"
    }
  }
}

Available tools 11

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

audit

audit_log

Owner only. The last uses of your vault: who (bot label), which login, which domain, what happened. Never contains secrets.

bot

create_bot_key

Owner only. Make a per-bot key (vk_...) that can only open sessions on the logins you name. Shown once; we store only its hash. Revoke any time with revoke_bot_key.

end

end_session

End a session now and wipe its cookies.

delete_login

Owner only. Delete a saved login, end its open sessions and remove it from every bot key.

logins

list_logins

List saved logins (name, domain, scope, sessions today; never secrets). With your owner key it also lists bot keys. A bot key only sees the logins it was granted.

open

open_session

Sign in with a saved login without seeing it. The server fills {{username}}, {{password}} and {{totp}} into your form, posts it to url (https, inside the login's allowed hosts), keeps the cookies encrypted, and returns an opaque session id. Checked against the login's scope and daily cap; logged to the audit log. If the site shows a CAPTCHA or new-device check, the reply suggests next_step request_human (Human Handoff relay). Free watch-only logs would_use_vault and signs in nowhere.

revoke

revoke_bot_key

Owner only. Revoke a bot key right away and end every session it opened.

save

save_login

Owner only (your Pro key, never a bot key). Store one login sealed with AES-256-GCM, with a scope: allowed hosts, allowed methods, a daily session cap and session TTL. Run it from your own machine, not inside the bot. The password and TOTP secret are never returned by any tool. Free watch-only stores nothing and logs would_use_vault.

session

session_fetch

Make one request inside an open session. url must be https inside the login's allowed hosts and the method must be in its allowed methods. The password, TOTP secret and codes are redacted from the reply; cookies never leave the vault.

usage

usage_and_upgrade

Show today's usage for your key or IP and the $9/month upgrade link. Free tier: 500 calls/day. Not metered.

weekly

weekly_report

Plain-English summary of the last 7 days: where your bots needed to sign in (by domain), sessions opened, blocked attempts, by bot. Read-only. Needs a key.

Endpoints

URL	Transport	State	Latency	Checked
https://vault.cloudforbots.com/mcp	streamable-http	answering	334 ms	3 min ago

Alternatives to Login Vault

same job, measured the same way

OTPilot

by otpilot

Use your OTPilot accounts (passwords, 2FA codes) to sign in and run commands, without seeing them.

83 installs/wk local only

KeyZula

by keyzula

Use passwords and API keys from your KeyZula vault without the assistant seeing them.

348 installs/wk local only

enclave

by avgvstvs96

Your agent asks for a password by one-time link, not in chat, and uses it without seeing it.

2 904 installs/wk local only

Vault MCP

by chill-ai-space

MCP server for credential isolation — bots use passwords and API keys without seeing them

79 installs/wk local only

YouTrack (ymcp)

by xlsft

YouTrack with your login and password: the built-in tools plus deletes, sprints, history and reports

local only

Secret Safe Env

by irrenwill

Write secrets into .env without the agent ever seeing the value - Windows masked dialog (繁中 UI)

73 installs/wk local only

Agentkey

by edan-ais

Password vault for AI agents with scoped, user-approved access

answering

Password Breach Check MCP

by mrfentmen

Check if a password has appeared in known breaches without sending the password. No key required.

65 installs/wk local only

Login Vault — questions

Answers built from our own checks of this server.

What can Login Vault do?

It exposes 11 tools, read directly from the server on our last check. Among them: audit_log, create_bot_key, delete_login, end_session, list_logins, open_session and 5 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Login Vault working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 45 of 92 checks got a reply (48.9%), average response time 347 ms. The bar chart above shows every period we have measured.

How do I connect Login Vault?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Login Vault need an API key?

No. Login Vault completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 11 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Login Vault?

It answers our handshake in 347 ms on average, which is faster than 39% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.