Read selected environment secrets

Retrieve the values for the requested keys. This requires secrets:read; treat the response as sensitive data.

Tool: readEnvironmentSecrets
Permission: secrets:read
Kind: Read-only

Arguments

Name	Type	Required	Limits
`keys`	`string[]`	Yes	See schema
`projectId`	`string`	Yes	At least 1 character(s)

Full input schema

{
  "type": "object",
  "properties": {
    "keys": {
      "type": "array",
      "items": {
        "type": "string",
        "minLength": 1
      }
    },
    "projectId": {
      "type": "string",
      "minLength": 1
    }
  },
  "required": [
    "projectId",
    "keys"
  ],
  "additionalProperties": false
}

Example call

The params of a tools/call request. Replace the placeholder values with your own IDs.

{
  "name": "readEnvironmentSecrets",
  "arguments": {
    "projectId": "REPLACE_WITH_PROJECT_ID",
    "keys": [
      "API_TOKEN"
    ]
  }
}

Result

The same data as the API operation, wrapped as {"untrusted_data": true, "source": "readEnvironmentSecrets", "note": "...", "data": ...} so the model treats project content as data, not instructions.