# Deck

> Deck gives AI agents authenticated access to any website without an API. Deck's browser agents sign in as your users, fetch data, fill out forms, and make payments, then return structured JSON to your product — at any scale.

Teams use Deck to pull bills and statements from utility and vendor portals, file claims and applications on government and payer sites, pay invoices on supplier and utility payment pages, and update the card on file at merchants. Deck stores your users' credentials in an encrypted vault, handles sign-in, MFA, and captchas, runs tasks on demand, on a schedule, or chained into workflows, and records every run with screenshots and agent reasoning. If a person can do it in a browser, a Deck agent can do it too.

Every agent session runs in a fully isolated virtual machine with credential vaulting, full audit trails, human-in-the-loop approvals, a kill switch, and session replay. Deck is SOC 2 Type II and PCI DSS Level 1, and used by teams at companies including Sunrun, BILT, Entrata, Wander, and EY.

## Docs

- [Documentation](https://docs.deck.co): Product docs for building, running, and observing computer use agents
- [API Reference](https://docs.deck.co/api-reference): REST API and SDK reference for agents, connections, and tasks
- [Developer resources](https://deck.co/developers): Named landing pages for OpenAPI, auth, webhooks, MCP, CLI, and errors
- [OpenAPI](https://deck.co/openapi.json): Versioned REST description with typed 4xx/5xx error schemas
- [API catalog](https://deck.co/.well-known/api-catalog): RFC 9727 catalog pointing at the v2 API
- [Error handling](https://docs.deck.co/api/errors): Machine-readable error codes, messages, and request IDs
- [Versioning and deprecation](https://docs.deck.co/api/api-status-and-changes): `/v2` path versioning and Sunset/Deprecation policy
- [Sitemap](https://deck.co/sitemap.xml): All public pages
- [Full content for LLMs](https://deck.co/llms-full.txt): Extended Deck reference including comparisons, FAQ, and pricing detail
- [Console](https://console.deck.co): Sign in to build and run agents

## Developer resources

- [Deck developer resources](https://deck.co/developers): Index of API docs, OpenAPI spec, auth, webhooks, MCP, CLI, and rate limits
- [Deck documentation](https://deck.co/docs): Product docs index (canonical guides at https://docs.deck.co)
- [Deck API documentation](https://docs.deck.co/api-reference): REST API and SDK reference for agents, connections, and tasks
- [Deck OpenAPI spec](https://deck.co/openapi): OpenAPI 3.1 for the Deck v2 REST API — also at https://deck.co/openapi.json
- [Deck API catalog](https://deck.co/.well-known/api-catalog): RFC 9727 machine-readable catalog of the Deck API and MCP server
- [Deck API authentication](https://deck.co/api-auth): Bearer token auth, base URL `https://api.deck.co/v2`, request format
- [Deck API errors](https://deck.co/errors): JSON error model with `type`, `code`, `message`, `resolution`, and `request_id`
- [Deck error schema](https://deck.co/errors.json): Typed JSON error contract for agents
- [Deck webhooks](https://deck.co/webhooks): Event destinations, deliveries, and webhook best practices
- [Deck API versioning](https://docs.deck.co/api/api-status-and-changes): `/v1/` vs `/v2/` path versioning and deprecation policy
- [Deck rate limits](https://deck.co/rate-limits): 200 requests / 10 seconds; RFC RateLimit headers and 429 Retry-After
- [Deck MCP server](https://deck.co/mcp): Official Model Context Protocol server for Deck docs and API
- [Deck MCP manifest](https://deck.co/.well-known/mcp): Well-known MCP discovery + live handshake at `https://docs.deck.co/mcp`
- [Deck CLI](https://deck.co/cli): Official CLI (`@deckco/cli` on npm) and `curl` against `/v2`
- [Deck API status](https://deck.co/api/status): Public JSON status plus live RateLimit headers
- [Deck OAuth authorization server](https://deck.co/.well-known/oauth-authorization-server): RFC 8414 metadata and named scopes
- [Deck OAuth protected resource](https://deck.co/.well-known/oauth-protected-resource): RFC 9728 resource metadata for https://api.deck.co/v2
- [Deck site JSON](https://deck.co/index.json): Machine-readable site + API discovery (`Accept: application/json` on `/`)

## Product

- [Home](https://deck.co/): Agents that connect where APIs don't — overview of Auth, Browser Agents, Tasks & Automation, and Observability
- [Product](https://deck.co/product): How Deck works — isolated VMs, auth, orchestration, and observability
- [Auth](https://deck.co/auth): Connect user accounts once; encrypted credential vault, sign-in, MFA, and login health ([markdown](https://deck.co/auth.md))
- [Browser Agents](https://deck.co/agents): Agents that log in, navigate, and fill out forms on any website and return structured data ([markdown](https://deck.co/agents.md))
- [Tasks & Automation](https://deck.co/tasks-and-automation): Define a task with a prompt and schema, run it on a schedule or via API, and chain tasks into workflows ([markdown](https://deck.co/tasks-and-automation.md))
- [Observability](https://deck.co/observability): Screenshots, agent reasoning, live view, sensitive tasks, and success-rate metrics for every run ([markdown](https://deck.co/observability.md))
- [API](https://deck.co/api): Embed computer use in your product with the Deck API
- [Pricing](https://deck.co/pricing): Free, Starter, Pro, and Enterprise plans
- [Security](https://deck.co/security): Isolation, encryption, access controls, and compliance
- [Skills](https://deck.co/skills): Prebuilt agent skills and workflows
- [Customers](https://deck.co/customers): Customer stories and case studies
- [Changelog](https://deck.co/changelog): Product updates and releases

## Use Cases

- [All use cases](https://deck.co/use-cases): Browse computer use workflows by industry
- [Agentic Payments](https://deck.co/use-cases/agentic-payments): Automate payment workflows across portals and SaaS
- [Bill Fetch](https://deck.co/use-cases/bill-fetch): Retrieve utility and vendor bills without APIs
- [Card Switch](https://deck.co/use-cases/card-switch): Update payment methods across subscriptions
- [Financial Institutions](https://deck.co/use-cases/financial-institution): Submit one applicant form, fill out issuer, lender, and account-opening portals, get structured results
- [Internal Workflows](https://deck.co/use-cases/internal-workflows): Automate cross-app ops workflows
- [Product Integrations](https://deck.co/use-cases/product-integrations): Ship integrations without building connectors
- [Spend Management](https://deck.co/use-cases/spend-management): Automate expense and spend workflows
- [User Migration](https://deck.co/use-cases/migration): Move users and data across systems
- [Onboarding](https://deck.co/use-cases/onboarding): Multi-app employee and customer onboarding
- [Ticket Transfer](https://deck.co/use-cases/ticket-transfer): Move tickets and records between tools

## Company

- [About](https://deck.co/company): Company overview, founders, and mission
- [Careers](https://deck.co/careers): Open roles at Deck
- [Partners](https://deck.co/partners): Solution and technology partner programs
- [Lab](https://deck.co/lab): Deck research roadmap — computer use, agentic systems, robotic use
- [Contact](https://deck.co/contact): Talk to sales or get in touch
- [Blog](https://deck.co/blog): Guides and articles on computer use agents
- [Deck vs Playwright](https://deck.co/blog/deck-vs-playwright): When to use Playwright vs Deck for browser automation in 2026
- [PCI DSS Level 1 ROC Certified](https://deck.co/blog/pci-dss-level-1-roc-certified): Deck is PCI DSS Level 1, validated through a Report on Compliance by an independent QSA
- [Trust Center](https://trust.mycroft.io/deck): Security and compliance documentation
- [LinkedIn](https://www.linkedin.com/company/deck-platform/): Company updates

## Optional

- [Privacy Policy](https://deck.co/privacy-policy): Website and platform privacy policy
- [Terms](https://deck.co/terms): Terms of service
- [End-User Privacy](https://deck.co/end-user-privacy-policy): Privacy for end users of Deck-powered experiences
- [Status](https://status.deck.co/): System status