VGS

​

Prerequisites

• A VGS vault holding the data to fill, and its vault ID (it starts with tnt).
• Aliases the site’s form accepts. For card numbers, the FPE_6_T_4 alias format keeps the card’s format and Luhn check (see operations).
• The hostnames that receive the data: the payment provider or iframe host, not only the merchant’s site.

​

Configure VGS

1. Create an outbound route for each host you will list in hosts, with that host as its upstream host. VGS answers requests to a host with no matching route with HTTP 400 (FAQ).
2. Reveal aliases in requests. On each route, add a filter in the request phase with a reveal operation that selects the field where the agent types the alias: the form field name for form posts, a JSONPath for JSON bodies, or a regex (selecting data elements).
3. Redact real values in responses. On each route, add a filter in the response phase with a redact operation that selects every field where the site can return a real value. VGS then stores the value and returns an alias instead, as in its card issuing guide. A response that matches no filter passes through unchanged, so check what each listed host returns. See why this matters.
4. Get outbound access credentials under your vault’s settings (access credentials). VGS shows the password only once, when you generate the credentials.
5. Download the VGS certificate for your environment (sandbox or live) from the Code snippets section of the VGS dashboard.

​

Map VGS’s values to the secret entry

​

Example

from pathlib import Path

from notte_sdk import NotteClient
from notte_sdk.types import NotteProxy, ProxySettings, SecretProxy

client = NotteClient()

proxies: list[ProxySettings] = [
    NotteProxy.from_country("us"),
    SecretProxy(
        server="https://tntXXXXXXXXX.sandbox.verygoodproxy.com:8443",
        username="YOUR_VGS_ACCESS_CREDENTIAL_USERNAME",
        password="YOUR_VGS_ACCESS_CREDENTIAL_PASSWORD",
        # The VGS certificate from your dashboard's "Code snippets" section
        ca_certificate=Path("sandbox.pem").read_text(),
        hosts=["api.stripe.com"],
    ),
]

with client.Session(proxies=proxies) as session:
    print(session.session_id)

import { readFileSync } from 'node:fs';
import { NotteClient, type SecretProxy } from 'notte-sdk';

const client = new NotteClient();

const vgs: SecretProxy = {
  type: 'secret',
  server: 'https://tntXXXXXXXXX.sandbox.verygoodproxy.com:8443',
  username: 'YOUR_VGS_ACCESS_CREDENTIAL_USERNAME',
  password: 'YOUR_VGS_ACCESS_CREDENTIAL_PASSWORD',
  // The VGS certificate from your dashboard's "Code snippets" section
  ca_certificate: readFileSync('sandbox.pem', 'utf8'),
  hosts: ['api.stripe.com'],
};

await client.Session({ proxies: [{ type: 'notte', country: 'us' }, vgs] }).use(async (session) => {
  console.log(session.getId());
});

​

Exit IP

​

Learn more

• VGS outbound routes
• Filters and operations
• Secret proxies