Botpasses

Store named credentials once. Agents request use. You authorize. The runtime gets the value. The model never does.

Grok Bot

MCP URL:

Connect that URL with Authorization: Bearer avm_…. Then say what you want (get my Spotify profile). Grok should call http.request immediately. Approve in the inbox when a grant is pending.


    

Store item

Items

Rotate

Inbox

Approve by code