| files | No | Optional file IDs to attach (from /files/upload). Max 5 files. | |
| model | No | Optional model name or profile key (from global config). Falls back to the configured default. | |
| proxy | No | Proxy configuration. WebRun-managed: { source: "WebRun", country: "GB" }. Custom: { source: "custom", type: "http"|"socks", host, port, username?, password? }. Omit for no proxy. | |
| debugC | No | Enable debug mode on the instance (default: false) | |
| prompt | Yes | Task description in natural language | |
| secrets | No | Domain-matched secrets [{match, fields}] passed to instance (not stored) | |
| webhook | No | Webhook configuration for task completion notification | |
| policyId | No | Policy ID to apply automation guardrails (domain restrictions, capability controls, LLM role). Optional. | |
| timezone | No | IANA timezone name for the session, e.g. "America/New_York", "Europe/London", "Asia/Tokyo". Date/time-sensitive instructions (e.g. "tomorrow morning", "today", "in 2 hours") are interpreted in this timezone. Defaults to "UTC" when omitted. | |
| outputType | No | Response format (default: text) | |
| maxDuration | No | Max duration in minutes (default: 20, max: 60) | |
| startingUrl | No | Optional starting URL | |
| outputSchema | No | JSON Schema for structured output (required if outputType is structured_json) | |
| environmentId | No | Environment ID for persistent profile session. Use list_environments to find available IDs. Without this, a disposable instance is used. | |
| reach_out_mode | No | Controls proactive chat-platform messages (Telegram/WhatsApp/Slack/Discord/Teams) to bot users on the same environment. Default: "off" — no messages are sent unless this is set explicitly. "guardrail_only" forwards guardrail prompts (CAPTCHA/2FA/verification) to chat when the API caller is offline. "full" also forwards the task result on completion. Each bot user additionally filters by their own reachOutMode preference. | |