Skip to main content
Capability: Vault credentials
Use this when the page you need is behind a login wall. The agent recognizes the login form and submits it — the agent never sees your password.
1

Connect your vault

Connect a supported password manager once. See Connect Your Vault for the setup flow.
2

Run the agent with vault access enabled

By default every synced credential is available for domain matching. To scope a run to specific credentials only, add credential_item_ids with IDs from GET /v1/vault/items — see Scope the Run.

Common Mistakes

The credential’s domain has to match the site the agent navigates to — a credential saved for linkedin.com won’t fire on an unrelated domain. Full matching rules and more failure modes: Vault Credentials Troubleshooting.
If more than one saved credential matches the same domain, scope the run explicitly with credential_item_ids instead of relying on use_vault: true picking the right one.

Vault Credentials

Domain matching, security model, and troubleshooting

Connect Your Vault

Supported password managers and setup steps