Set Secret
set_secretStore or update a secret with KMS envelope encryption and optional expiry. Returns the new version number.
Instructions
Store or update a secret. The value is envelope-encrypted server-side using AWS KMS. Returns the new version number.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Secret name (e.g. OPENAI_API_KEY, db/connection-string) | |
| value | Yes | Plaintext value to encrypt and store | |
| metadata | No | Optional key-value metadata to attach (not encrypted separately) | |
| expiresAt | No | Optional: absolute expiry as ISO 8601 datetime (mutually exclusive with ttlSeconds) | |
| ttlSeconds | No | Optional: auto-expire this secret after N seconds |