# properties.domain.description
The hosted domain this password covers. Must belong to the calling account.

# properties.domainId.description
The domain by id (dom_…), as an alternative to `domain`.

# properties.address.description
Local-part pattern within the domain — `*` (default, every address), `hello`, `support-*`, `*-agent`. No `@`: the domain is already named.

# properties.protocols.description
What the password may authenticate. Defaults to `["imap"]`.

# properties.label.description
Optional name shown in the dashboard (e.g. the client or agent holding it).