Sign in with a saved login without seeing it

Sign in with a saved login without seeing it. The server fills {{username}}, {{password}} and {{totp}} into your form, posts it to url (https, inside the login's allowed hosts), keeps the cookies encrypted, and returns an opaque session id. Checked against the login's scope and daily cap; logged to the audit log. If the site shows a CAPTCHA or new-device check, the reply suggests next_step request_human (Human Handoff relay). Free watch-only logs would_use_vault and signs in nowhere.

post/api/run/open_session

Request

  • Base URL: https://vault.cloudforbots.com
  • URL: https://vault.cloudforbots.com/api/run/open_session
  • Auth: one of:
    • none
    • HTTP bearer

Request body

namestring required

Saved login name.

urlstring required

The sign-in endpoint, e.g. https://example.com/session.

formobject

Fields to send, values may use {{username}}, {{password}}, {{totp}}. Default {"username":"{{username}}","password":"{{password}}"}.

as'form' | 'json'

Body encoding. Default form.

method'POST' | 'PUT'

Default POST.

prefetchboolean

GET the url first to pick up CSRF cookies. Default true.

Response

Result with job, understood, outcome, usage

object required

Changes

No recorded changes to this operation across all 1 revision of this API.