Secrets

Back to the MCP tool reference.

list_secrets

List names, owners, and context only; never retrieve secret values.

Operation type: Read-only

Annotations: read-only true, destructive false, idempotent true, open-world true

Input schema:

{
  "properties": {
    "cluster": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Cluster"
    },
    "limit": {
      "default": 1000,
      "title": "Limit",
      "type": "integer"
    },
    "org": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Org"
    },
    "project": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Project"
    }
  },
  "title": "list_secretsArguments",
  "type": "object"
}

Output schema:

{
  "additionalProperties": true,
  "title": "list_secretsDictOutput",
  "type": "object"
}

get_secret_to_file

Write a secret to a new mode-0600 local file. The destination must be new, and the secret value is never returned.

Operation type: Write

Annotations: read-only false, destructive false, idempotent false, open-world true

Input schema:

{
  "properties": {
    "cluster": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Cluster"
    },
    "destination_file": {
      "title": "Destination File",
      "type": "string"
    },
    "key": {
      "title": "Key",
      "type": "string"
    },
    "org": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Org"
    },
    "project": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Project"
    }
  },
  "required": [
    "key",
    "destination_file"
  ],
  "title": "get_secret_to_fileArguments",
  "type": "object"
}

Output schema:

{
  "additionalProperties": true,
  "title": "get_secret_to_fileDictOutput",
  "type": "object"
}

create_secret_from_source

Create a secret without accepting or returning its value. File sources must be private regular files.

Operation type: Write

Annotations: read-only false, destructive false, idempotent false, open-world true

Input schema:

{
  "properties": {
    "cluster": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Cluster"
    },
    "key": {
      "title": "Key",
      "type": "string"
    },
    "org": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Org"
    },
    "project": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Project"
    },
    "source_name": {
      "title": "Source Name",
      "type": "string"
    },
    "source_type": {
      "enum": [
        "env",
        "file",
        "secret"
      ],
      "title": "Source Type",
      "type": "string"
    }
  },
  "required": [
    "key",
    "source_type",
    "source_name"
  ],
  "title": "create_secret_from_sourceArguments",
  "type": "object"
}

Output schema:

{
  "additionalProperties": true,
  "title": "create_secret_from_sourceDictOutput",
  "type": "object"
}

delete_secret

Delete one exact secret under full or owned managed policy.

Operation type: Destructive write

Annotations: read-only false, destructive true, idempotent true, open-world true

Input schema:

{
  "properties": {
    "cluster": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Cluster"
    },
    "key": {
      "title": "Key",
      "type": "string"
    },
    "org": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Org"
    },
    "project": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Project"
    }
  },
  "required": [
    "key"
  ],
  "title": "delete_secretArguments",
  "type": "object"
}

Output schema:

{
  "additionalProperties": true,
  "title": "delete_secretDictOutput",
  "type": "object"
}