gcp_secret_list
Read-onlyIdempotent
Retrieve and manage Google Cloud Secret Manager secrets. List all secrets or view specific secret versions with optional value display for secure access control.
Instructions
시크릿 목록|비밀 관리|secret manager|secrets - Secret Manager 시크릿을 조회합니다
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| secret_name | No | 시크릿 이름 (없으면 목록, 있으면 해당 시크릿의 버전 목록) | |
| project_id | No | GCP 프로젝트 ID (기본: 현재 설정된 프로젝트) | |
| show_value | No | 시크릿 값 표시 여부 (기본: false, 보안 주의!) | |
| version | No | 조회할 버전 (기본: latest) | latest |
| format | No | 출력 형식 (기본: text) | text |
Implementation Reference
- src/gcp/secret.ts:54-201 (handler)The main asynchronous handler function that implements the gcp_secret_list tool. It handles listing secrets, secret versions, or retrieving secret values using gcloud CLI commands, with support for JSON/text output and error handling.
export async function gcpSecretList(args: GcpSecretListArgs) { try { const projectId = await getProjectId(args.project_id); if (args.secret_name) { if (args.show_value) { // Get secret value const version = args.version || 'latest'; const command = `secrets versions access ${version} --secret=${args.secret_name} --project=${projectId}`; const result = await executeGcloud(command, 15000); const secretValue = result.stdout.trim(); if (args.format === 'json') { return { content: [ { type: 'text', text: JSON.stringify({ project: projectId, secret: args.secret_name, version, value: secretValue, }, null, 2), }, ], }; } return { content: [ { type: 'text', text: `🔐 시크릿: ${args.secret_name}\n버전: ${version}\n\n값:\n${secretValue}`, }, ], }; } else { // Get secret versions const command = `secrets versions list ${args.secret_name} --project=${projectId} --format=json`; const result = await executeGcloud(command, 15000); let versions: any[] = []; try { versions = JSON.parse(result.stdout || '[]'); } catch { versions = []; } const versionList = versions.map((v: any) => ({ name: v.name?.split('/').pop(), state: v.state, created: v.createTime, })); if (args.format === 'json') { return { content: [ { type: 'text', text: JSON.stringify({ project: projectId, secret: args.secret_name, versions: versionList, }, null, 2), }, ], }; } const lines = ['🔐 시크릿 버전 목록: ' + args.secret_name, '']; versionList.forEach((v) => { const stateEmoji = v.state === 'ENABLED' ? '✅' : v.state === 'DISABLED' ? '⏸️' : '❌'; lines.push(` ${stateEmoji} ${v.name} - ${v.state}`); }); return { content: [ { type: 'text', text: lines.join('\n'), }, ], }; } } else { // List all secrets const command = `secrets list --project=${projectId} --format=json`; const result = await executeGcloud(command, 15000); let secrets: any[] = []; try { secrets = JSON.parse(result.stdout || '[]'); } catch { secrets = []; } const secretList = secrets.map((s: any) => ({ name: s.name?.split('/').pop(), created: s.createTime, labels: s.labels, })); if (args.format === 'json') { return { content: [ { type: 'text', text: JSON.stringify({ project: projectId, totalSecrets: secretList.length, secrets: secretList, }, null, 2), }, ], }; } const lines = ['🔐 Secret Manager 시크릿 목록', `프로젝트: ${projectId}`, '']; if (secretList.length === 0) { lines.push('시크릿이 없습니다.'); } else { secretList.forEach((s) => { lines.push(` 🔑 ${s.name}`); }); } return { content: [ { type: 'text', text: lines.join('\n'), }, ], }; } } catch (error: any) { return { content: [ { type: 'text', text: formatError(error), }, ], isError: true, }; } } - src/gcp/secret.ts:4-44 (schema)The tool definition including name, description, annotations, and input schema for parameters like secret_name, project_id, show_value, version, and format.
export const gcpSecretListDefinition = { name: 'gcp_secret_list', description: '시크릿 목록|비밀 관리|secret manager|secrets - Secret Manager 시크릿을 조회합니다', annotations: { title: 'Secret Manager 조회', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true, }, inputSchema: { type: 'object' as const, properties: { secret_name: { type: 'string', description: '시크릿 이름 (없으면 목록, 있으면 해당 시크릿의 버전 목록)', }, project_id: { type: 'string', description: 'GCP 프로젝트 ID (기본: 현재 설정된 프로젝트)', }, show_value: { type: 'boolean', description: '시크릿 값 표시 여부 (기본: false, 보안 주의!)', default: false, }, version: { type: 'string', description: '조회할 버전 (기본: latest)', default: 'latest', }, format: { type: 'string', enum: ['text', 'json'], description: '출력 형식 (기본: text)', default: 'text', }, }, required: [], }, }; - src/index.ts:77-89 (registration)The gcpSecretListDefinition is included in the 'tools' array, which is returned by the ListToolsRequest handler to register the tool with the MCP server.
const tools = [ gcpSetupDefinition, gcpLogsReadDefinition, gcpRunStatusDefinition, gcpRunLogsDefinition, gcpSqlQueryDefinition, gcpSqlProxyDefinition, gcpStorageListDefinition, gcpSecretListDefinition, gcpAuthStatusDefinition, gcpServicesListDefinition, gcpBillingInfoDefinition, ]; - src/index.ts:225-226 (registration)In the central CallToolRequest handler, the 'gcp_secret_list' case dispatches to the gcpSecretList handler function.
case 'gcp_secret_list': return await gcpSecretList(args as any) as CallToolResult;