vault_entry_inject_env
Inject a vault secret directly into a .env file using server-side decryption, never exposing the plaintext to the agent.
Instructions
Write a vault secret directly into an environment variable file (.env). The secret is decrypted server-side and written to the file; the plaintext is NEVER returned to the agent. Use this instead of exec file-writing commands.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| entry_id | Yes | The vault entry ID (from vault_entries_list). | |
| purpose | Yes | The task/purpose for retrieving this secret (for audit log). | |
| file_path | Yes | Absolute path to the .env file to update. | |
| env_key | Yes | The environment variable name to set, e.g. LISTMONK_ADMIN_PASSWORD. |