disentangle_secrets
Break the synchronization link between two entangled secrets to stop future rotation propagation. Use when retiring a key or intentionally diverging values.
Instructions
[secrets] Break the sync link between two previously entangled keys so future rotations no longer propagate. Use when one of the keys is being retired or should diverge intentionally; pair with delete_secret if you also want to erase one of the values, and use entangle_secrets to recreate the link. Mutates only metadata; the current values remain untouched. Safe and idempotent — running on a pair that was never linked returns success without effect. Subject to tool policy. Returns 'Disentangled: SOURCE </> TARGET'.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| sourceKey | Yes | First key in the previously linked pair. | |
| targetKey | Yes | Second key in the previously linked pair. | |
| sourceScope | No | Where the secret lives. 'global' = user keyring (default if omitted on reads), 'project' = scoped to projectPath, 'team' = team-shared (needs teamId), 'org' = org-shared (needs orgId). | global |
| targetScope | No | Where the secret lives. 'global' = user keyring (default if omitted on reads), 'project' = scoped to projectPath, 'team' = team-shared (needs teamId), 'org' = org-shared (needs orgId). | global |
| sourceProjectPath | No | Project root for sourceKey when sourceScope='project'. | |
| targetProjectPath | No | Project root for targetKey when targetScope='project'. |