---
name: "vault_generate_password"
area: "vault"
title: "Make a strong password"
price: "$0.001"
method: "POST"
url: "https://api.conecto.chat/v1/tools/vault_generate_password"
mcp_server: "https://api.conecto.chat/mcp/vault"
auth: "Authorization: Bearer <conecto_sk_ key>"
docs_url: "https://conecto.chat/tools/vault/vault_generate_password"
---

# Make a strong password (`vault_generate_password`)

Makes a random password and saves it straight into the vault under a name; it is shown for this call only.

A random password (letters, digits and symbols, or only letters and digits) saved straight into the vault under name, and returned for this call only.

Price: $0.001 a call. A call that fails costs nothing.

## Use it when

A new account needs a password: a shop admin, a supplier portal, a social account.

## Say this to your agent

> Make a strong password for the new shop admin account and keep it in the vault.

## Inputs

| Name | Type | Required | Description | Allowed values | Default |
|---|---|---|---|---|---|
| `name` | string | yes | e.g. "Shopify admin" or "SUPPLIER_API_KEY". Matches ^[A-Za-z0-9][A-Za-z0-9 ._-]{0,79}$. |  |  |
| `length` | integer | no | 12 to 128. |  | `24` |
| `symbols` | boolean | no |  |  | `true` |
| `username` | string | no | Up to 200 characters. |  |  |
| `url` | string | no | Up to 500 characters. |  |  |

## Example

Written for Halverson Cycle & Repair, a bike shop with a repair workshop in Portland, Oregon.

MCP: call `vault_generate_password` on the MCP server `https://api.conecto.chat/mcp/vault` with these arguments:

```json
{
  "name": "Shop admin",
  "length": 24,
  "username": "admin@halversoncycle.example",
  "url": "https://shop.halversoncycle.example/admin"
}
```

REST:

```bash
curl https://api.conecto.chat/v1/tools/vault_generate_password \
  -H "Authorization: Bearer $CONECTO_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name": "Shop admin", "length": 24, "username": "admin@halversoncycle.example", "url": "https://shop.halversoncycle.example/admin"}'
```

## Response

```json
{
  "call_id": "5f0c8a2e-3b7d-4c1e-9a64-2d8e1f7b0c93",
  "tool": "vault_generate_password",
  "status": "succeeded",
  "replayed": false,
  "cost_usd": "$0.001",
  "balance_usd": "$19.75",
  "result": {
    "name": "Shop admin",
    "value": "k-B58H5zgej#wYD@BBFTMYxb"
  }
}
```

`result`: The name and the new password.

## Errors

| Code | Status | When | Fix |
|---|---|---|---|
| `not_found` | 404 | A bot named in bots is not one of the business's. | Use bot names from GET /v1/keys. |
| `forbidden` | 403 | The secret is limited to other bots of the business. | Ask the owner, or the bot that saved it, to add this bot. |
| `name_taken` | 409 | Another call saved a secret with that name at the same moment. | Call again. |
| `limit_reached` | 409 | The vault holds 500 secrets already. | Delete some with vault_delete. |
| `unavailable` | 503 | The vault is not available right now. | Try again later; nothing was charged. |

The refusals every tool can give (401 key, 402 balance, 429 limits) are on the errors page: https://conecto.chat/docs/errors.md

## Related

- [vault_save](https://conecto.chat/tools/vault/vault_save.md): Keeps a secret (an API key, a password, a login) encrypted under a name; saving under a name in use replaces it. $0.001 a call.
- [vault_get](https://conecto.chat/tools/vault/vault_get.md): A secret's value, for this call only; it is never kept in the call log, and each read is counted. Free up to 1,000,000 reads a month.
- [vault_list](https://conecto.chat/tools/vault/vault_list.md): The vault's secrets with their username, url, note, who may read them and when they were last read; never the values. Free up to 1,000,000 reads a month.
- [vault_delete](https://conecto.chat/tools/vault/vault_delete.md): Removes a secret from the vault, for good. Free.