Skip to main content

Overview

Secure storage for passwords, API keys, and tokens.
  • Stored in YAML files or in-memory dicts
  • Never logged or exposed
  • Auto-injected as type_secret action
  • Simple string or dict format

Quick Start

Method 2: YAML File

  1. Create credentials file:
  1. Enable in config.yaml:
  1. Use in code:

How Agents Use Credentials

When credentials are provided, the type_secret action is automatically available:

Executor/Manager Mode

FastAgent Mode

The agent never sees the actual value - only the secret ID.

Example: Login Automation

What the agent does:
  1. Opens Gmail: open_app("Gmail")
  2. Clicks email field: click(index=3)
  3. Types email: type("user@example.com", index=3)
  4. Clicks password field: click(index=5)
  5. Types password securely: type_secret("EMAIL_PASS", index=5)
  6. Clicks login: click(index=7)

Credentials vs Variables

Example: Using Variables

Troubleshooting

Error: Credential manager not initialized

Solution:
Or:

Error: Secret ‘X’ not found

Check available secrets:
Verify in YAML:

Custom Credential Managers

Extend CredentialManager for custom secret storage:
Implement any custom secret storage backend.
See Configuration Guide for credential setup. See Custom Variables for non-sensitive data.