Get Workspace Secrets
get_workspace_secretsList workspace secret keys by platform with recommended mappings for task configuration. Note secrets are injected as file paths, not literal values.
Instructions
List available secret keys with platform grouping and mapping guidance.
Returns a structured payload that helps agents pick the right
secret_vars mapping for a task. The raw key list is preserved in
secrets for backward compatibility.
Response shape::
{ "workspace": "", "secrets": [], "platform_groups": { "kubernetes": ["kubeconfig"], "azure": [...], ... }, "recommended_secret_vars": { "kubernetes": { "kubeconfig": "kubeconfig" }, "azure": { "AZURE_CLIENT_ID": "...", ... }, ... }, "runtime_semantics": "", "skill_reference": "runwhen-skill://discover-secrets", }
Critical for agents: workspace secrets are injected into scripts as
FILE PATHS, not literal values. See the discover-secrets skill
for the read_secret helper pattern.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| workspace_name | Yes | The workspace to query (e.g. 't-oncall'). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |