# Human Handoff relay > Human-in-the-loop relay for AI agents. When your agent hits a CAPTCHA, a 2FA code, an approval or a sign-in it should not do alone, it calls request_human; your person gets a one-tap link, solves it in their own browser or pastes the code, and the answer comes back to your agent. Codes are read once and wiped in 10 minutes. We never solve CAPTCHAs and never ask for passwords. ## Connect - MCP (streamable HTTP): https://relay.cloudforbots.com/mcp - Claude Code: `claude mcp add --transport http human-handoff https://relay.cloudforbots.com/mcp` - REST: `POST https://relay.cloudforbots.com/api/run/` with JSON args. OpenAPI: https://relay.cloudforbots.com/openapi.json - Auth: optional `Authorization: Bearer `. Free key: `POST https://relay.cloudforbots.com/api/key` ## Pricing - Free: 500 calls/day (daily, not a trial). No signup. - Pro: $9/month, 50000 calls/day: https://pay.instaloops.com/b/6oU8wP9lK3wzf9tb8P83C3D - Bring your own model. Works with Claude, Codex, ChatGPT, Grok Bot. ## Tools ### request_human Hand one blocked step to your human: a CAPTCHA, a 2FA/OTP code, an approval, or a sign-in your agent should not do alone. Pro acts: sends your person a one-tap link (to notify_webhook, Slack/Discord-compatible, and/or notify_email), returns request_id, and later an HMAC-signed POST to callback_url when they answer. Free watch-only logs a would_request for the weekly stuck report and sends nothing. We never solve CAPTCHAs and never ask for passwords. Inputs: `kind` (string, required), `step` (string, required), `url` (string), `agent` (string), `notify_webhook` (string), `notify_email` (string), `callback_url` (string), `timeout_minutes` (integer) ### check_request Poll a request: pending, done, approved, denied, code_ready, expired or cancelled. For 2fa_code, the code is returned exactly once (single read) and only within 10 minutes of the person sending it; then it is wiped. Inputs: `request_id` (string, required) ### cancel_request Cancel a pending request (for example your agent got past the step another way). The link stops working and any unread code is wiped. Inputs: `request_id` (string, required) ### weekly_report Plain-English summary of the last 7 days: where your agent got stuck (by kind and by site), requests sent or that would have been, how many your person answered and how fast. Read-only; sends nothing. Needs a free API key. Inputs: none ### usage_and_upgrade Usage today + upgrade link (not metered). ## FAQ ### What problem does this solve? Agents stall at CAPTCHAs, 2FA codes and "confirm it's you" steps, and then the run just waits or fails. The relay hands that one step to your person with a one-tap link and gets the answer straight back to your agent. ### Do you solve CAPTCHAs? No. Your person solves the CAPTCHA themselves, in their own browser, on the real site. We only pass the message and tell your agent when they are done. ### Do you see or store passwords? No. There is no password field anywhere. For sign-ins your person logs in themselves and taps done. We never ask for, accept or store passwords. ### How are 2FA codes handled? Your person pastes the code on the one-tap page. It is stored encrypted, your agent can read it exactly once with check_request, and it is wiped after that read or after 10 minutes, whichever comes first. Callbacks never contain the code. ### How does my person get the request? Pro posts to the notify_webhook you pass (Slack and Discord incoming webhooks work, or any https URL) and/or emails notify_email. The message has one link; no account or app is needed. ### How does my agent get the answer? Poll check_request with the request_id, or pass callback_url and we POST the answer signed with X-Relay-Signature, a hex HMAC-SHA256 of timestamp + "." + body using the callback_secret returned at request time. ### What is watch-only mode? The free plan logs every step your agent would have handed to a person as would_request and builds a weekly report of where it got stuck, by kind and by site. Nothing is sent to anyone. It is not a trial. ### What does Pro do? Sends the requests, relays 2FA codes (single read, 10-minute TTL), approvals and done taps, posts HMAC-signed callbacks, and allows 50,000 calls a day. ### Is there a model inside? No. Bring your own model. The relay only moves one message to your person and one answer back. ### What does it cost? Free: watch-only, 500 calls a day. Pro is $9 a month, or $90 for a year. It is also included in the Cloud for Bots All Access bundle. Publisher: Supa Humans (https://supahumans.ai). Marketplace: https://botrecipe.com/tools/ ## Machine files - https://relay.cloudforbots.com/ - https://relay.cloudforbots.com/index.md - https://relay.cloudforbots.com/llms.txt - https://relay.cloudforbots.com/llms-full.txt - https://relay.cloudforbots.com/SKILL.md - https://relay.cloudforbots.com/openapi.json - https://relay.cloudforbots.com/tool.json - https://relay.cloudforbots.com/.well-known/mcp.json