Secrets

Pass domain-scoped credentials to the agent securely.

Pass credentials to the agent scoped by domain. The agent uses them only on matching domains.

Python

from browser_use_sdk import AsyncBrowserUse

client = AsyncBrowserUse()
result = await client.run(
    "Log into GitHub and star the browser-use/browser-use repo",
    secrets={"github.com": "username:password123"},
    allowed_domains=["github.com"],
)

import { BrowserUse } from "browser-use-sdk";

const client = new BrowserUse();
const result = await client.run(
  "Log into GitHub and star the browser-use/browser-use repo",
  {
    secrets: { "github.com": "username:password123" },
    allowedDomains: ["github.com"],
  },
);

Use allowed_domains to restrict the agent to specific domains. Supports wildcards: example.com, *.example.com.

For SSO/OAuth redirects, include all domains in the auth flow:

Python

result = await client.run(
    "Log into the company portal and download the Q4 report",
    secrets={
        "portal.example.com": "[e-mail]:password123",
        "okta.com": "[e-mail]:password123",
    },
    allowed_domains=["portal.example.com", "*.okta.com"],
)

const result = await client.run(
  "Log into the company portal and download the Q4 report",
  {
    secrets: {
      "portal.example.com": "[e-mail]:password123",
      "okta.com": "[e-mail]:password123",
    },
    allowedDomains: ["portal.example.com", "*.okta.com"],
  },
);