Doppler SecretOps for AI agents

Agents read Doppler SecretOps at once. Changes and sends are held for a person's approval by default.

About Doppler SecretOps

Doppler is a secrets management platform that helps teams securely manage and sync environment variables across projects and environments.

What an agent can do in Doppler SecretOps

Every Doppler SecretOps action is classed by the platform as a read, a change or a send. Reads run at once. Changes and sends are held for a person by default.

Runs at once (reads)

Looks things up in Doppler SecretOps without asking first. 13 actions.

  • Get Config DetailsTool to fetch a config's details. Use when you need metadata for a specific config after specifying the project and config names. Example: "Get details for config 'staging-config' in project 'proj-123
  • Get Environment DetailsTool to retrieve an environment. Use when you need metadata for a specific environment after specifying the project and environment slug.
  • Integrations ListTool to list all external integrations. Use when you need to retrieve all configured external integrations after authentication.
  • Invites ListTool to list open workplace invites. Use when you need to retrieve all pending invitations for the current Doppler workplace after authenticating.
  • Get Project MemberTool to retrieve a project member by type and slug. Use after confirming project slug, member type, and slug.
  • Get Project RoleTool to retrieve a project role. Use when you need details of a specific project role after authenticating.
  • Activity Logs ListTool to list workplace activity logs. Use when you need to fetch recent activity logs.
  • Retrieve Activity LogTool to retrieve a single activity log entry by id. Use when you have a valid Activity Log id.
  • Retrieve Config Log EntryTool to retrieve a specific config log entry. Use when needing details of a single config log; call after specifying project, config, and log identifiers.
  • Config Logs ListTool to list config change logs for a specific config. Use when you need the audit trail for a config after confirming its identity.
  • List EnvironmentsTool to list environments in a Doppler project. Use when you need environment metadata for a specific project after providing the project slug.
  • Project Permissions ListTool to list project-level permissions. Use when you need to fetch all available permissions for projects after authentication.
Show all 13
  • List ProjectsTool to list Doppler projects. Use when you need to retrieve all projects with optional pagination.

Held for approval by default (changes and sends)

Held for a person's approval by default. The approval is recorded and the action is sent once, never twice, with 10 seconds to undo. 16 actions.

  • Clone ConfigTool to clone a branch config including all its secrets. Use after confirming the source config details.
  • Create Branch ConfigTool to create a branch config. Use when you need to programmatically establish a new branch-based configuration for a specified project and environment. Use after selecting the target project and env
  • Configs DeleteTool to delete a config permanently. Use when you need to remove a config that is no longer needed.
  • Lock ConfigTool to lock a config. Use when you need to prevent a config from being renamed or deleted after confirming the project and config names. Example: "Lock config 'staging-config' in project 'proj-123' a
  • Unlock ConfigTool to unlock a config. Use when you need to allow renaming or deletion of a previously locked config. Example: "Unlock config 'staging-config' in project 'proj-123'."
  • Revoke Dynamic Secret LeaseTool to revoke a dynamic secret lease. Use when you need to invalidate an active lease by its ID after confirming the config and dynamic secret identifiers.
  • Create EnvironmentTool to create a new environment. Use when you need to programmatically create an environment for a specified project.
  • Environments DeleteTool to delete an environment. Use when you need to remove an environment from a project after confirming it's no longer in use.
  • Rename EnvironmentTool to rename an environment. Use when you need to update an environment's display name after confirming project and environment identifiers.
  • Create ProjectTool to create a project. Use when you need to programmatically initialize a new Doppler project after authentication.
  • Projects DeleteTool to delete a project permanently. Use after confirming irreversible removal.
  • Config Logs RollbackTool to rollback a config to a selected log version. Use when needing to undo a specific change by its log ID, after confirming project, config, and log ID.
Show all 16
  • Update ConfigTool to modify an existing config. Use when you need to rename a config after confirming project and config names.
  • Remove Group MemberTool to remove a member from a group. Use after confirming the group slug and member identifiers.
  • Remove Project MemberTool to remove a member from a project. Use after confirming project slug, member type, and slug. Example: "Delete member 'jdoe' of type 'users' from project 'my-project-slug'."
  • Update SecretsTool to update secrets in a config. Use when you need to change secret values for deployments.

Changes wait in Needs you

Changes and sends in Doppler SecretOps are held for a person's approval by default. The approval is recorded, and the action is sent once, never twice, with 10 seconds to undo.

How approvals work

Doppler SecretOps questions

Can an agent change data in Doppler SecretOps on its own?

Not by default. Changes and sends in Doppler SecretOps are held for a person's approval. The approval is recorded, and the action is sent once, never twice, with 10 seconds to undo.

What can an agent read in Doppler SecretOps?

This connector lists 13 read actions. Reads run at once, without waiting for approval.

How does Doppler SecretOps connect?

It connects with API key. Connectors are built and maintained by third-party developers; availability is confirmed during scoping.

Bring Doppler SecretOps to your agents.