delimit_secret_store
Store credentials in a scoped, audited secrets broker so agents can retrieve them at runtime with access logging.
Instructions
Write a credential into the Delimit secrets broker store.
When to use: when onboarding an API key, OAuth token, or other credential that one or more agents/tools will need at execution time, and you want the access scoped + audit-logged rather than sitting in an environment variable or .env file. Typical pairing: call this once at setup, then call delimit_secret_get from the consuming tool at runtime. When NOT to use: to fetch the value (use delimit_secret_get for just-in-time access with audit), to inspect which secrets exist without revealing values (delimit_secret_list), to disable an existing secret (delimit_secret_revoke), or to read the access audit trail (delimit_secret_access_log). Also: do not use this as a general-purpose key/value store — the broker is credential- scoped and the audit log will fill up with non-credential noise.
Sibling contrast: delimit_secret_store writes; delimit_secret_get reads with JIT access logging; delimit_secret_list shows metadata only (never values); delimit_secret_revoke disables; together they form the broker surface. Compared to writing a value directly to .env, this routes through a scoped, audited broker.
Side effects: invokes ai.secrets_broker.store_secret which persists the value to the broker's at-rest store. The scope field is also persisted and is enforced on every subsequent delimit_secret_get call. There is no append-only history of stored values — a re-store with the same name overwrites. No network egress and no ledger write; the audit trail is the broker's own access log (visible via delimit_secret_access_log), which records the WRITE event as well as later reads.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Secret name (key). Required. | |
| value | No | Secret value (the actual credential). Required. | |
| scope | No | Comma-separated agent/tool scopes that may access this secret, or "all" to allow any. Default "all". | all |
| description | No | Human-readable description for audit trails. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||