# Machina Secrets

> Machina Secrets Manager

- Skill: `machina-sports/machina-secrets` (Agent Skill)
- Install (CLI): `npx skillmds@latest add machina-sports/machina-secrets`
- Raw SKILL.md: https://api.skillmd.com/api/skills/machina-sports/machina-secrets/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: machina-sports (https://skillmd.com/u/machina-sports)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/machina-sports/machina-secrets

---


# Machina Secrets Manager

This skill allows the agent to securely inject third-party API keys (OpenAI, Sportradar, Google) into the Machina Pod's encrypted vault.

## Usage

> **Vault Usage:** The Vault is used exclusively to store credentials for third-party data providers (e.g., Sportradar, OPTA, Twitter, Odds APIs).


When a user installs a connector that requires API keys (e.g., `MACHINA_CONTEXT_VARIABLE_SPORTRADAR_API_KEY`), use the MCP tool to set it in the vault.

### Example MCP Call
```python
mcp__create_secrets({
    "data": {
        "name": "SPORTRADAR_API_KEY",
        "key": "your-sportradar-key"
    }
})
```

To verify if a secret is already configured:
```python
mcp__check_secrets({
    "name": "SPORTRADAR_API_KEY"
})
```


<validation_gate>
Before setting a secret, ALWAYS verify if the secret is already configured by calling `mcp__check_secrets`. Do not overwrite existing secrets unless explicitly requested by the user.
</validation_gate>

<error_handling>
If `mcp__create_secrets` fails:
- Output an `<error>` block explaining the failure.
- DO NOT log the raw API key in your text response.
- Ask the user to verify their Pod connection.
</error_handling>