Skip to main content
Glama
runwhen-contrib

RunWhen Platform MCP

Get Workspace Secrets

get_workspace_secrets

List workspace secret keys by platform with recommended mappings for task configuration. Note secrets are injected as file paths, not literal values.

Instructions

List available secret keys with platform grouping and mapping guidance.

Returns a structured payload that helps agents pick the right secret_vars mapping for a task. The raw key list is preserved in secrets for backward compatibility.

Response shape::

{ "workspace": "", "secrets": [], "platform_groups": { "kubernetes": ["kubeconfig"], "azure": [...], ... }, "recommended_secret_vars": { "kubernetes": { "kubeconfig": "kubeconfig" }, "azure": { "AZURE_CLIENT_ID": "...", ... }, ... }, "runtime_semantics": "", "skill_reference": "runwhen-skill://discover-secrets", }

Critical for agents: workspace secrets are injected into scripts as FILE PATHS, not literal values. See the discover-secrets skill for the read_secret helper pattern.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
workspace_nameYesThe workspace to query (e.g. 't-oncall').

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden and does well: it discloses the critical non-obvious runtime semantics that secrets are injected as FILE PATHS, not literal values, and references the skill helper. It stops short of covering auth requirements, pagination, or side effects, but for a read-only lister this is strong context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose and critical semantics are front-loaded and the closing 'FILE PATHS, not literal values' note earns its place, but the full response-shape JSON block is largely redundant when an output schema already exists, adding length without new information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read tool that has an output schema, the description covers purpose, return semantics, and the crucial file-path caveat. Nothing essential to correct invocation is missing, though the redundant return-shape block slightly dilutes focus.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Only one parameter, workspace_name, and schema description coverage is 100%, so the schema already documents it fully. The description adds no syntax or format guidance for the parameter beyond what the schema provides, matching the baseline 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('List') and resource ('available secret keys') plus the scope of platform grouping and mapping guidance. It is clearly distinct from all siblings, none of which expose workspace secret keys, though it does not explicitly name an alternative tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It implies when to use it — 'helps agents pick the right secret_vars mapping for a task' — and points to the discover-secrets skill for the read_secret pattern, but gives no explicit when-not conditions or alternative tools to compare against.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.