| name | vault-secrets |
| description | Manage HashiCorp Vault KV secrets with strict value protection. |
| version | 1.0.0 |
| license | Apache-2.0 |
| author | netclaw |
| tags | [] |
Vault Secrets Skill
Manage HashiCorp Vault KV secrets with strict value protection.
Tools
| Tool | Description |
|---|
read_secret | Read secret metadata (values NEVER displayed) |
write_secret | Write secret to KV engine |
list_secrets | List secrets in a path |
delete_secret | Delete a secret |
get_secret_metadata | Get secret version metadata |
inject_secret | Inject secret value to integration |
CRITICAL: Secret Value Protection
Secret values are NEVER displayed in responses. When reading secrets:
- Only metadata is shown (version, created time, etc.)
- Actual secret values are never logged or returned
- Use
inject_to parameter to send secrets directly to integrations
Example Queries
List secrets in the network-devices path
Read metadata for secret network-devices/router-creds
Inject router credentials to pyATS testbed
Write a new secret to network-devices/switch-01
Prerequisites
VAULT_ADDR Vault server addressVAULT_TOKEN Authentication token with appropriate policy- Optional:
VAULT_NAMESPACE for Vault Enterprise
Server
This skill uses the vault-mcp server which connects to Vault API.
