---
name: "vault_get"
area: "vault"
title: "Read a secret"
price: "free"
method: "POST"
url: "https://api.conecto.chat/v1/tools/vault_get"
mcp_server: "https://api.conecto.chat/mcp/vault"
auth: "Authorization: Bearer <conecto_sk_ key>"
docs_url: "https://conecto.chat/tools/vault/vault_get"
---

# Read a secret (`vault_get`)

A secret's value, for this call only; it is never kept in the call log, and each read is counted.

A secret's value, for this call only: it is never stored in the call log. Each read is counted.

Price: Free up to 1,000,000 reads a month for the whole account, then $0.50 per 10,000 reads. A call that fails costs nothing.

## Use it when

Right before the agent signs in somewhere or calls another service with the secret.

## Say this to your agent

> Log in to the Cascade dealer portal and check when our tire order ships.

## Inputs

| Name | Type | Required | Description | Allowed values | Default |
|---|---|---|---|---|---|
| `name` | string | yes | e.g. "Shopify admin" or "SUPPLIER_API_KEY". Matches ^[A-Za-z0-9][A-Za-z0-9 ._-]{0,79}$. |  |  |

## Example

Written for Halverson Cycle & Repair, a bike shop with a repair workshop in Portland, Oregon.

MCP: call `vault_get` on the MCP server `https://api.conecto.chat/mcp/vault` with these arguments:

```json
{
  "name": "Cascade dealer portal"
}
```

REST:

```bash
curl https://api.conecto.chat/v1/tools/vault_get \
  -H "Authorization: Bearer $CONECTO_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name": "Cascade dealer portal"}'
```

## Response

```json
{
  "call_id": "5f0c8a2e-3b7d-4c1e-9a64-2d8e1f7b0c93",
  "tool": "vault_get",
  "status": "succeeded",
  "replayed": false,
  "cost_usd": "$0.00",
  "balance_usd": "$19.75",
  "result": {
    "name": "Cascade dealer portal",
    "value": "birch-anchor-saddle-1871",
    "username": "orders@halversoncycle.example",
    "url": "https://dealers.cascadebikesupply.example"
  }
}
```

`result`: The name, value, username and url.

## Errors

| Code | Status | When | Fix |
|---|---|---|---|
| `not_found` | 404 | No secret in the vault has that name. | Call vault_list for the names. |
| `forbidden` | 403 | The secret is limited to other bots of the business. | Ask the owner, or the bot that saved it, to add this bot. |
| `unavailable` | 503 | The vault is not available right now. | Try again later; nothing was charged. |

The refusals every tool can give (401 key, 402 balance, 429 limits) are on the errors page: https://conecto.chat/docs/errors.md

## Related

- [vault_save](https://conecto.chat/tools/vault/vault_save.md): Keeps a secret (an API key, a password, a login) encrypted under a name; saving under a name in use replaces it. $0.001 a call.
- [vault_list](https://conecto.chat/tools/vault/vault_list.md): The vault's secrets with their username, url, note, who may read them and when they were last read; never the values. Free up to 1,000,000 reads a month.
- [vault_generate_password](https://conecto.chat/tools/vault/vault_generate_password.md): Makes a random password and saves it straight into the vault under a name; it is shown for this call only. $0.001 a call.
- [vault_delete](https://conecto.chat/tools/vault/vault_delete.md): Removes a secret from the vault, for good. Free.