get-secret
Retrieve encrypted secrets like API keys and passwords from SecureCode vault, injecting values into local files to prevent exposure in conversations. Use reveal mode to view raw values with audit logging.
Instructions
Get a secret by name. By default, injects the value into a local file so it never appears in the AI conversation. Use reveal:true to see the raw value (audited as conscious action). Use cleanup:true to remove all injected secrets from disk.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | The exact name of the secret (e.g. STRIPE_SECRET_KEY) | |
| tags | No | Filter tags to disambiguate same-name secrets, e.g. { "env": "production", "project": "acme" } | |
| reveal | No | If true, returns the raw value in the conversation (audited as reveal). Default: false (inject mode — value written to local file, never shown) | |
| cleanup | No | If true, removes all injected secret files from disk |