Skills that need a login

​

How it works

1. You save the login in the app’s Vault (Website Login) or with POST /v1/logins. It is encrypted and only ever shown masked (to***h).
2. You pick it on the skill: in the skill’s settings, This skill signs in with…, or with PATCH /v1/skills/{slug}. You confirm once; later runs need no prompt.
3. A run checks the start page. If your browser profile is already signed in, nothing else happens — the run just reads the page. That is the usual case after the first run.
4. If the site asks for a login, the run signs in once on the same browser, then reads the page as normal.
5. If it still cannot get in, the run stops and tells you why in needs_user (below). It never retries in a loop.

​

What stays private

• never reach the AI model that drives the browser (it sees only placeholders such as vault_password; the real value is typed at the keyboard, on the login site only),
• are never written to logs, run results, rows, traces, webhooks or MCP results,
• are never recorded while the run signs in (the network recording pauses for that step),
• are never shared with your workspace. A login is personal.

​

Two-step sign-in

​

When a run cannot sign in

{
  "status": "failed",
  "triage_kind": "login_failed",
  "needs_user": {
    "kind": "bad_password",
    "message": "The site did not accept the saved login. Check the username and password in the Vault, then run it again.",
    "action_url": "/vault"
  }
}

​

API keys

• logins:write — save, change and delete logins, and pick a skill’s login.
• logins:use — run skills that sign in, and hand a run a code. A key without it still runs the skill, but never signs in.

​

Cost

​

Example

# 1. Save the login (once)
curl -X POST https://api.valendata.com/v1/logins \
  -H "Authorization: Bearer vd_sk_..." -H "Content-Type: application/json" \
  -d '{"site": "example.com", "username": "you@example.com", "password": "..."}'

# 2. Pick it on the skill
curl -X PATCH https://api.valendata.com/v1/skills/my-orders \
  -H "Authorization: Bearer vd_sk_..." -H "Content-Type: application/json" \
  -d '{"login_id": "LOGIN_ID"}'

# 3. Run it as usual
curl -X POST "https://api.valendata.com/v1/skills/my-orders/run?max_results=5" \
  -H "Authorization: Bearer vd_sk_..." -H "Content-Type: application/json" -d '{}'