Reference

MCP operations

The tool surface is intentionally small. All results pass through the server's redaction layer.

Operation	Input	Result / behavior
`list_secret_refs`	None	Opaque IDs, names, and destination bindings. Never returns secret values.
`navigate`	`url`	Navigates the broker-owned browser and returns its final URL and title.
`snapshot`	None	Returns interactive elements with IDs for subsequent click/type/fill operations. Filled values are redacted.
`click`	`element_uid`	Clicks an element from the most recent snapshot.
`type_text`	`element_uid`, `text`	Types visible, non-secret text. Never use it for a credential.
`fill_secret`	`secret_id` plus `element_uid`, or `fields`	Checks the binding, requests export, then injects via CDP. May return `pending_approval`.
`await_fill`	`fill_id`, optional `timeout_seconds` (1–120)	Waits for approval, revalidates the target, and completes the pending fill; it can remain pending.
`list_network_requests`	None	Reserved scaffold; currently returns `not_implemented`.

Fill shapes

Single field

{ "secret_id": "secret_123", "element_uid": "input_4" }

Multi-field JSON payload

{
  "secret_id": "card_123",
  "fields": [
    { "key": "number", "element_uid": "input_4" },
    { "key": "expiry", "element_uid": "input_5" },
    { "key": "cvc", "element_uid": "input_6" }
  ]
}

Each payload key must be declared in the secret's sbm:fields binding. The multi-field call uses one export and, when configured, one approval.

Configuration

Variable	Meaning
`SBM_CHROME_PATH`	Optional explicit path to a Chromium-based browser.
`SBM_HEADLESS=false`	Shows the broker-owned browser instead of running headless.
`TURNKEY_API_PUBLIC_KEY`	Turnkey API public key for the real Secrets backend.
`TURNKEY_API_PRIVATE_KEY`	Turnkey API private key for the real Secrets backend.
`TURNKEY_ORGANIZATION_ID`	Turnkey organization containing the secrets.