---
name: automateyournetwork/vault-secrets
source: https://app.decimal.ai/s/automateyournetwork-vault-secrets@1/SKILL.md
source_sha256: 3d8e144acff0
---

# Vault Secrets Skill

Manage HashiCorp Vault KV secrets with strict value protection.

## Tools

| Tool | Description |
|------|-------------|
| `read_secret` | Read secret metadata (values NEVER displayed) |
| `write_secret` | Write secret to KV engine |
| `list_secrets` | List secrets in a path |
| `delete_secret` | Delete a secret |
| `get_secret_metadata` | Get secret version metadata |
| `inject_secret` | Inject secret value to integration |

## CRITICAL: Secret Value Protection

**Secret values are NEVER displayed in responses.** When reading secrets:
- Only metadata is shown (version, created time, etc.)
- Actual secret values are never logged or returned
- Use `inject_to` parameter to send secrets directly to integrations

## Example Queries

```
List secrets in the network-devices path

Read metadata for secret network-devices/router-creds

Inject router credentials to pyATS testbed

Write a new secret to network-devices/switch-01
```

## Prerequisites

- `VAULT_ADDR` Vault server address
- `VAULT_TOKEN` Authentication token with appropriate policy
- Optional: `VAULT_NAMESPACE` for Vault Enterprise

## Server

This skill uses the `vault-mcp` server which connects to Vault API.