API: Sign-in accounts
Sign-in accounts: List sign-in accounts, Add a sign-in account, Delete a sign-in account.
List sign-in accounts
The sign-in accounts stored for a project: names, usernames and sites. Passwords are never returned.
| Path |
|---|
projectIdstringrequired |
Returns { credentials: [{ id, name, username, site, createdAt, lastUsedAt }] }
curl https://app.testsy.dev/api/v1/projects/p_8f2k/credentials \
-H "Authorization: Bearer $QA_AI_API_KEY"Add a sign-in account
Store a sign-in account the tester can use. The password is encrypted, never returned, and never sent to the tester's AI: the tester types it. Tests refer to the account by name ("Sign in as the account \"customer\""). Through MCP the password passes through your AI agent: prefer adding passwords in the web app or over the REST API from a secret store.
| Path |
|---|
projectIdstringrequired |
| Body (JSON) |
|---|
namestringrequired |
usernamestringrequired |
passwordstringrequired |
sitestring |
Returns 201 { id }
curl -X POST https://app.testsy.dev/api/v1/projects/p_8f2k/credentials \
-H "Authorization: Bearer $QA_AI_API_KEY" \
-H "Content-Type: application/json" \
-d '{"name":"Checkout","username":"customer@example.com","password":"…"}'Delete a sign-in account
Delete a sign-in account. Tests that sign in with it stop running until it is added again or they are edited.
| Path |
|---|
credentialIdstringrequired |
Returns { ok: true }
curl -X DELETE https://app.testsy.dev/api/v1/credentials/cr_k1 \
-H "Authorization: Bearer $QA_AI_API_KEY"