aws_secretsmanager_describe_secret
Retrieve metadata about AWS Secrets Manager secrets, including rotation settings, replication status, and tags, without exposing the secret value itself.
Instructions
Get metadata about a secret (rotation, replication, tags) without retrieving the value.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"secret_id": "<secret_id>"
},
"name": "aws_secretsmanager_describe_secret"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| profile | No | AWS profile name from ~/.aws/config (e.g., 'default', 'production') | |
| region | No | AWS region override (e.g., 'us-east-1', 'sa-east-1') | |
| sensitive_access_token | No | Out-of-band approval token configured in AWS_MCP_SENSITIVE_ACCESS_TOKEN. Required for operations that can return decrypted or secret values. | |
| sensitive_access_reason | No | Short human reason for retrieving sensitive data. Required for auditability. | |
| sensitive_access_acknowledged | No | Must be true to confirm that the response may contain secret or decrypted data. | |
| secret_id | Yes | Secret name or ARN |