get_workspace_secrets
Lists available secret keys grouped by platform and provides recommended secret variable mappings for accurate task configuration.
Instructions
List available secret keys with platform grouping and mapping guidance.
Returns a structured payload that helps agents pick the right
secret_vars mapping for a task. The raw key list is preserved in
secrets for backward compatibility.
Response shape::
{ "workspace": "", "secrets": [], "platform_groups": { "kubernetes": ["kubeconfig"], "azure": [...], ... }, "recommended_secret_vars": { "kubernetes": { "kubeconfig": "kubeconfig" }, "azure": { "AZURE_CLIENT_ID": "...", ... }, ... }, "runtime_semantics": "", "skill_reference": "runwhen-skill://discover-secrets", }
Critical for agents: workspace secrets are injected into scripts as
FILE PATHS, not literal values. See the discover-secrets skill
for the read_secret helper pattern.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| workspace_name | Yes | The workspace to query (e.g. 't-oncall'). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |