> ## Documentation Index > Fetch the complete documentation index at: https://www.kernel.sh/docs/llms.txt > Use this file to discover all available pages before exploring further. # Enroll a captured card > Capability-only browser protocol for embedded card capture. Authorization is Bearer , not an API key. No cookies. Cross-origin GET, POST and OPTIONS are allowed without credentials. Query strings are rejected. ## OpenAPI ````yaml https://api.onkernel.com/spec.json post /vault/card-captures/current openapi: 3.1.0 info: description: Developer tools and cloud infrastructure for AI agents to use web browsers title: Kernel API version: 0.1.0 servers: - description: API Server url: https://api.onkernel.com security: - bearerAuth: [] tags: - description: Search the web and retrieve content for selected results. name: Search - description: Create and manage browser sessions. name: Browsers - description: Control mouse, keyboard, and screen on the browser instance. name: Browser Computer Controls - description: >- Execute Playwright code against the browser instance and manage the executors it runs in. name: Browser Playwright - description: Execute JavaScript in the browser instance's persistent Browser REPL. name: Browser REPL - description: Discover and invoke native page tools across the browser instance. name: Browser WebMCP - description: Read, write, and manage files on the browser instance. name: Browser Filesystem - description: Execute and manage processes on the browser instance. name: Browser Processes - description: Record and manage browser session video replays. name: Browser Replays - description: Stream logs from the browser instance. name: Browser Logs - description: >- Stream live telemetry events from a browser session, and manage the destinations sessions export them to. name: Browser Telemetry - description: Create, list, retrieve, and delete browser profiles. name: Profiles - description: Create and manage proxy configurations for routing browser traffic. name: Proxies - description: Create, list, retrieve, and delete browser extensions. name: Extensions - description: Create and manage browser pools for acquiring and releasing browsers. name: Browser Pools - description: Inspect the identity and authorization context for the current request. name: Authentication - description: >- Create and manage auth connections for automated credential capture and login. name: Managed Auth - description: Create and manage credentials for authentication. name: Credentials - description: Configure external credential providers like 1Password. name: Credential Providers - description: List applications and versions. name: Apps - description: Create and manage app deployments and stream deployment events. name: Deployments - description: Invoke actions and stream or query invocation status and events. name: Invocations - description: Read and manage organization-level limits. name: Organization - description: | Create and manage projects for resource isolation within an organization. When projects are disabled for the organization, project operations return `404` with code `projects_disabled`. name: Projects - description: Create and manage API keys for organization and project-scoped access. name: API Keys - description: Read audit log records for the authenticated organization. name: Audit Logs - description: Resolve browser and proxy recommendations for bot-protected sites. name: Config Registry paths: /vault/card-captures/current: post: tags: - Vaults summary: Enroll a captured card description: >- Capability-only browser protocol for embedded card capture. Authorization is Bearer , not an API key. No cookies. Cross-origin GET, POST and OPTIONS are allowed without credentials. Query strings are rejected. operationId: postVaultCardCapture parameters: - description: Bearer from a Kernel card_enrollment action. in: header name: Authorization required: true schema: type: string requestBody: content: application/json: examples: enroll: value: card_id: CRDexample12345 email: cardholder@example.com schema: additionalProperties: false properties: card_id: type: string email: format: email maxLength: 254 type: string required: - card_id - email type: object required: true responses: '200': content: application/json: examples: completed: value: status: completed schema: properties: status: enum: - completed type: string required: - status type: object description: Enrollment completed, including a safe resend of the same card ID. '400': content: application/json: schema: properties: code: enum: - invalid_request - invalid_capture - card_rejected - capture_unauthorized - capture_expired - capture_unavailable - capture_in_progress - card_in_use - capture_unconfirmed - rate_limited - capture_failed - capture_retry type: string required: - code type: object description: invalid_request, invalid_capture, or card_rejected. '401': content: application/json: schema: properties: code: enum: - invalid_request - invalid_capture - card_rejected - capture_unauthorized - capture_expired - capture_unavailable - capture_in_progress - card_in_use - capture_unconfirmed - rate_limited - capture_failed - capture_retry type: string required: - code type: object description: capture_unauthorized. '409': content: application/json: schema: properties: code: enum: - invalid_request - invalid_capture - card_rejected - capture_unauthorized - capture_expired - capture_unavailable - capture_in_progress - card_in_use - capture_unconfirmed - rate_limited - capture_failed - capture_retry type: string required: - code type: object description: capture_in_progress, card_in_use, or capture_unconfirmed. '410': content: application/json: schema: properties: code: enum: - invalid_request - invalid_capture - card_rejected - capture_unauthorized - capture_expired - capture_unavailable - capture_in_progress - card_in_use - capture_unconfirmed - rate_limited - capture_failed - capture_retry type: string required: - code type: object description: capture_expired or capture_unavailable. '429': content: application/json: schema: properties: code: enum: - invalid_request - invalid_capture - card_rejected - capture_unauthorized - capture_expired - capture_unavailable - capture_in_progress - card_in_use - capture_unconfirmed - rate_limited - capture_failed - capture_retry type: string required: - code type: object description: rate_limited. '500': content: application/json: schema: properties: code: enum: - invalid_request - invalid_capture - card_rejected - capture_unauthorized - capture_expired - capture_unavailable - capture_in_progress - card_in_use - capture_unconfirmed - rate_limited - capture_failed - capture_retry type: string required: - code type: object description: capture_failed. '503': content: application/json: schema: properties: code: enum: - invalid_request - invalid_capture - card_rejected - capture_unauthorized - capture_expired - capture_unavailable - capture_in_progress - card_in_use - capture_unconfirmed - rate_limited - capture_failed - capture_retry type: string required: - code type: object description: capture_retry. security: [] components: securitySchemes: bearerAuth: scheme: bearer type: http ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.