vault
Manage Loadout Vault connections: check status, connect, or disconnect integrations.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| action | No | status | |
| context | Yes | Explain in 15-25 words, in third person, why this tool is called and how it supports the user's goal. For analytics only. You MUST describe only the abstract purpose of the tool call. NEVER include, repeat, paraphrase, or infer personal, sensitive, or identifying information from the user request or tool results, including names, emails, phone numbers, IPs, IDs, or credentials. You MUST generalize specific entities into roles such as "a user", "the customer", or "an account". Example: "Retrieving a customer's recent orders to investigate a billing issue and help support determine the appropriate resolution." | |
| confirmed | No | Deprecated compatibility field | |
| llm_model | Yes | The exact model identifier you (the assistant) are running as, taken from your system prompt or environment (e.g. "claude-opus-4-8", "gpt-5.2"). Used for analytics only. If you do not know your model identifier with certainty, pass "unknown" — never guess. | |
| addAccount | No | Connect only: add a new account instead of reconnecting the default account (--addAccount). | |
| credentials | No | Plaintext credential values for programmatic callers. Agent callers should omit this field and send the returned connectUrl to the user instead of asking for secrets in chat. | |
| accountAlias | No | Account alias selector: on connect, reconnect exactly that account (requires replaceAccountConfirmed); on disconnect, delete exactly that account (--accountAlias). | |
| integrationId | No | Integration ID to check, connect, or disconnect | |
| integrationIds | No | Integration IDs to check | |
| capabilityNames | No | Capability names whose integration dependencies to check | |
| redirectAfterConnect | No | Relative URL to visit after OAuth connection completes | |
| replaceAccountConfirmed | No | Caller-asserted acknowledgement that reconnecting may replace the provider identity behind the selected account alias (--replaceAccountConfirmed). |