diff --git a/internal/cli/app.go b/internal/cli/app.go
index 38d535e..92d4fe1 100644
--- a/internal/cli/app.go
+++ b/internal/cli/app.go
@@ -137,6 +137,9 @@ func (a *App) runBootstrap(ctx context.Context, args []string) error {
 			Setup: func(ctx context.Context, inv frameworkbootstrap.Invocation) error {
 				return a.runConfig(ctx, frameworkbootstrap.CommandSetup, inv.Args)
 			},
+			Login: func(ctx context.Context, inv frameworkbootstrap.Invocation) error {
+				return a.runLogin(ctx, inv.Args)
+			},
 			MCP: func(ctx context.Context, inv frameworkbootstrap.Invocation) error {
 				return a.runMCP(ctx, inv.Args)
 			},
@@ -238,6 +241,16 @@ func (a *App) runConfig(ctx context.Context, command string, args []string) erro
 	return nil
 }
 
+func (a *App) runLogin(_ context.Context, _ []string) error {
+	_, err := frameworksecretstore.LoginBitwarden(frameworksecretstore.BitwardenLoginOptions{
+		ServiceName: a.runtimeMetadata().BinaryName,
+		Stdin:       a.stdin,
+		Stdout:      a.stdout,
+		Stderr:      a.stderr,
+	})
+	return err
+}
+
 func (a *App) runConfigShow(ctx context.Context, args []string) error {
 	if a.configStore == nil {
 		return fmt.Errorf("config store is not configured")