Skip to content

web_fillSecret

INTERNAL — fills a form field with a value that must NOT be logged (passwords, tokens, OTPs). Prefer plain web_type for any value that isn’t sensitive, since the LLM-facing recording is more useful when the value is visible. Use only from scripted tools where the value is loaded from a trusted source (secrets store, fixture file, etc.).

Source

  • Kind: class-backed
  • Class: xyz.block.trailblaze.playwright.tools.PlaywrightNativeFillSecretTool

Contract

  • Visible to LLM: yes (surface_to_llm: true)
  • Recordable: yes (is_recordable: true)
  • Host-only: no (requires_host: false)

Input schema

Required parameters

  • refString Element ID, ARIA descriptor (e.g., ‘textbox “Password”’), or CSS selector with css= prefix.
  • valueString The secret value to fill. Never logged anywhere on the host side.

Output

Returns: string (opaque text content)

Typed result schemas (kind: query | action, MCP structuredContent) are not yet carried by the resolved manifest — this section will gain detail when that lands.