resolve_secret
Resolves named secrets from configured backends (vault, 1Password, Bitwarden, env vars) at runtime, returning decrypted values without exposing them in conversation transcripts.
Instructions
Resolve a secret by name using the configured backend (local vault, 1Password, Bitwarden, or env vars). Returns the decrypted value at runtime. The secret value is never visible in the LLM conversation transcript — it is resolved just-in-time for the current operation.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | The name of the secret to resolve (e.g., OPENAI_API_KEY, DATABASE_URL) |