NestDaddy

Login Vault

com.botrecipe/vault · v1.0.0

Scoped login vault: your bot signs in to sites without ever seeing the password.

Connect Remote server

Terminal
claude mcp add --transport http vault https://vault.cloudforbots.com/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "vault": {
      "url": "https://vault.cloudforbots.com/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "vault": {
      "type": "http",
      "url": "https://vault.cloudforbots.com/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://vault.cloudforbots.com/mcp

Tools 11 found in our last check

  • save_login

    Owner only (your Pro key, never a bot key). Store one login sealed with AES-256-GCM, with a scope: allowed hosts, allowed methods, a daily session cap and session TTL. Run it from your own machine, not inside the bot. The password and TOTP secret are never returned by any tool.…

  • list_logins

    List saved logins (name, domain, scope, sessions today; never secrets). With your owner key it also lists bot keys. A bot key only sees the logins it was granted.

  • delete_login

    Owner only. Delete a saved login, end its open sessions and remove it from every bot key.

  • create_bot_key

    Owner only. Make a per-bot key (vk_...) that can only open sessions on the logins you name. Shown once; we store only its hash. Revoke any time with revoke_bot_key.

  • revoke_bot_key

    Owner only. Revoke a bot key right away and end every session it opened.

  • open_session

    Sign in with a saved login without seeing it. The server fills {{username}}, {{password}} and {{totp}} into your form, posts it to url (https, inside the login's allowed hosts), keeps the cookies encrypted, and returns an opaque session id. Checked against the login's scope and…

  • session_fetch

    Make one request inside an open session. url must be https inside the login's allowed hosts and the method must be in its allowed methods. The password, TOTP secret and codes are redacted from the reply; cookies never leave the vault.

  • end_session

    End a session now and wipe its cookies.

  • audit_log

    Owner only. The last uses of your vault: who (bot label), which login, which domain, what happened. Never contains secrets.

  • weekly_report

    Plain-English summary of the last 7 days: where your bots needed to sign in (by domain), sessions opened, blocked attempts, by bot. Read-only. Needs a key.

  • usage_and_upgrade

    Show today's usage for your key or IP and the $9/month upgrade link. Free tier: 500 calls/day. Not metered.

Details

Endpointhttps://vault.cloudforbots.com/mcp (Streamable HTTP)
First published16 Oct 2026
Last updated16 Oct 2026
Registry namecom.botrecipe/vault

More cloud and devops servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.