# Agent Job Secrets

> Use to list or retrieve agent job secrets, API keys, and OAuth credentials (auto-refreshed). Trigger when the user mentions a secret/credential by name, or asks "what secrets are available", "get the X token", "fetch the Y API key", or when a previously-fetched credential stops working and needs to be re-fetched.

- Skill: `stephengpope/agent-job-secrets` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add stephengpope/agent-job-secrets`
- Raw SKILL.md: https://api.skillmd.com/api/skills/stephengpope/agent-job-secrets/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: stephengpope (https://skillmd.com/u/stephengpope)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/stephengpope/agent-job-secrets

---


## Usage

```bash
# List available secret keys (fetches current list from server)
node skills/agent-job-secrets/agent-job-secrets.js list

# Get a secret value (OAuth credentials are auto-refreshed)
node skills/agent-job-secrets/agent-job-secrets.js get MY_CREDENTIALS
```

## Notes

- `AGENT_JOB_TOKEN` and `APP_URL` are injected automatically — no setup required.
- Plain (non-OAuth) secrets are also available directly as env vars (e.g. `echo $MY_KEY`).
- OAuth credentials must be fetched via `get` — they are not available as env vars.
- `get` on an OAuth credential refreshes it server-side and returns a fresh access token.
- If a fetched credential stops working (expired token, 401 error), call `get` again to obtain a fresh one.
- `list` always fetches from the server, so it reflects secrets added after the container started.