Connect your own HashiCorp Vault cluster (AppRole authentication) to read and manage KV v2 secrets, policies, and auth methods -- full read/write plus value-add vault health and secret-rotation reports. Secret values are never logged.
Every capability exposed by HashiCorp Vault, metered per action and guarded by the two-step safety protocol.
connect_vaultwriteConnect your own HashiCorp Vault instance by saving its base URL plus an AppRole RoleID/SecretID, after checking it actually works.
disconnect_vaultwriteDisconnect a HashiCorp Vault instance: deletes the saved RoleID/SecretID/token. Nothing in Vault itself is changed.
list_connectionsreadList the connected HashiCorp Vault instances.
list_secretsreadList secret keys at a path in a KV v2 mount.
get_secretreadRead one secret's current (or a specific) version from a KV v2 mount.
create_secretwriteCreate a new secret (or a new version if it already exists) at a path in a KV v2 mount.
update_secretwriteWrite a new version of an existing secret at a path in a KV v2 mount, optionally with a check-and-set version guard.
delete_secretwriteSoft-delete one or more versions of a secret (recoverable via undelete). Deletes only the latest version if none specified.
destroy_secretwritePermanently destroy specific versions of a secret -- unlike delete_secret, this cannot be undone via undelete.
list_policiesreadList ACL policies configured on the connected Vault instance.
get_policyreadRead one ACL policy's HCL rules in full by name.
create_policywriteCreate or overwrite an ACL policy with the given HCL rules.
delete_policywritePermanently delete an ACL policy by name. Cannot be undone.
list_auth_methodsreadList authentication methods (mounts, e.g. AppRole, LDAP, OIDC) enabled on the connected Vault instance.
list_secrets_enginesreadList Secrets Engines (mounts, e.g. KV v2, database, PKI) enabled on the connected Vault instance.
list_approlesreadList AppRole role names configured under an AppRole auth mount.
get_seal_statusreadRead the connected Vault instance's seal status: sealed/initialized state, version, cluster name.
get_healthreadRead the connected Vault instance's health status: initialized/sealed/standby state.
audit_vault_instancereadBuild one aggregated health report for the connected Vault instance: seal status, secrets engine and policy counts.
More extensions in Secrets Management ready to enable in one click.
Enable HashiCorp Vault in your Imperal workspace in one click - 10,000 free starter credits included.