Manages encrypted secrets in the caller's per-user secret store. Supports storing secrets with automatic redaction in job records.
| Name: | secret |
| Class: | covia.adapter.SecretAdapter |
This adapter provides 2 MCP tool(s) for AI agent integration:
| Tool Name | Description |
|---|---|
| secret_set | Store an encrypted secret in the caller's per-user secret store. The secret value is redacted in the job record. |
| secret_extract | Retrieve a secret from the caller's per-user secret store. Capability-gated — currently rejects all calls until UCAN-based grants are wired up. Most agents should reference secrets by name in operation arguments (e.g. apiKey: 's/OPENAI_API_KEY') and let the venue resolve them at invocation time, rather than reading values out via this op. |