Drıftstack docs
Docs

Saved credentials: save a password for the AI agent, use it in a task, delete it

You might be here because: “how do I give the AI agent my password” · “Save a credential” · “Credential saved” · “Write this in an agent task where the value should be typed” · “where is the handle of my saved credential” · “can I see the password I saved” · “how do I change a saved password” · “delete a saved credential” · “Saved credentials are not available on this deployment” · “Only the account owner can add or delete saved credentials”

Short answer

Save the value once on the dashboard’s Saved credentials page: a label, the value, and the website or websites it may be typed on. You get a handle, written as {{credential:cred_…}}. Put that handle in an agent task where the value should be typed. The AI planning the task is given the handle, never the value, and Driftstack types the value only on a secure (https://) page of a website you saved it for. A saved value is never shown again: to change one, delete it and save a new one.

Check first

  • Are you signed in to the dashboard as the account owner? Saving and deleting happen on the dashboard only. The API can list saved credentials but cannot save or delete one. In a teammate’s workspace the page says: “Only the account owner can add or delete saved credentials. The list below is the account owner’s: these are the saved credentials agent tasks in this workspace use. Copy a handle to use one in a task; values are never shown.”
  • Does the plan include the AI agent? Saved credentials are typed by agent tasks, and the trial has no AI agent.
  • Is it a password, a one-time code or a similar value? Do not save payment card numbers or card security codes.

Likely causes and fixes

  1. Saving one. Open Saved credentials in the dashboard and fill in Label (for example “Shop password”), Value and Website (a host name such as shop.example.com, no https://, path or port; separate several with commas, up to 10). Tick Also on its subdomains only if the value is used on login.shop.example.com and the like. Press Save credential.
  2. “Credential saved” — the box under it shows the placeholder to copy: “Write this in an agent task where the value should be typed. The value itself is not shown again.” Every saved credential’s handle stays in the list on that page, so you can copy it again later.
  3. Using it in a task. Write the placeholder as the whole value of what should be typed, for example: Sign in to shop.example.com with the email [email protected] and the password {{credential:cred_9f2c…}}. The placeholder only works as the whole text typed into a field; one inside other text, a web address or a selector fails that step and nothing is typed.
  4. “Can I see the password I saved?” No. The value is write-only: no page and no endpoint returns it.
  5. Changing a value or its websites. Delete the credential and save a new one; the new one has a new handle, so update the tasks that use it.
  6. Deleting one. Press Delete on its row and confirm. The value is removed at once and cannot be restored, and an agent task that uses its handle — including one running now — fails at that step with “it no longer exists”.
  7. “Saved credentials are not available on this deployment.” That server is not set up to encrypt saved values, so it stores none. On Driftstack’s own service this should not appear; on a self-hosted server, ask whoever runs it.
  8. The limit. An account holds up to 50 saved credentials; delete one before saving another.

If it still fails

If saving is refused with a sentence this page does not explain, press Talk to a person in this chat (or open Help) with the sentence and the label you used. Never send the value itself.