Ligantic

/

/

/

/

Secret - Get

Type identifier: secret:get Category: Secret Operations

Description

The Secret - Get node retrieves a secret value from the secure secret store. Secrets are stored encrypted and are only decrypted when needed. The retrieved value is returned as a wrapped secret that can be passed to other nodes requiring credentials.

Input Handles

Handle	Type	Description
`path`	`string[]`	(Dynamic) Path to the secret in the store.

Note: The path handle appears when set to dynamic mode.

Output Handles

Handle	Type	Description
`value`	secret (wrapped)	The retrieved secret value (wrapped).

Configuration Options

Option	Type	Default	Description
Path	`string[]` or dynamic	`["my-secret"]`	Path to the secret in the store.

Path Structure

Paths are arrays of strings representing a hierarchical key:

["api-key"] — Top-level secret
["integrations", "stripe", "secret-key"] — Nested path

Behaviour

Resolves the secret path
Looks up the secret
Returns the secret value as a wrapped secret object
Wrapped secrets can be passed to nodes that accept credentials

Wrapped Secrets

Secrets are returned in a wrapped format:

The actual value is not exposed in logs or outputs
Other nodes can unwrap secrets when needed
Provides defence against accidental exposure

Security

Secrets are stored encrypted at rest
Access is scoped to the Space or identity
Run log tracks secret access

Examples

Retrieve API Key

Configuration:

Path: ["api-keys", "openai"]

Output: Wrapped secret containing the API key.

Dynamic Secret Path

Configuration:

Path: dynamic

Input:

path: ["customers", customerId, "api-key"]

Use case: Retrieve customer-specific credentials.

Related pages

Integration - HTTP

The Integration - HTTP node performs HTTP requests to external URLs, supporting all common HTTP methods, custom headers, query parameters, request bodies, and OAuth 1.0a authentication. It can return parsed responses matching a defined schema.

Integration - SMTP

The Integration - SMTP node sends emails through an SMTP server. It supports various email formats including plain text, HTML, and rich content with automatic text fallback. The node can handle attachments and supports common email features like CC, BCC, and reply threading.

Integration - SQL Connect

The Integration - SQL Connect node creates a connection to a SQL database that can be used by subsequent Integration - SQL Query nodes. It supports PostgreSQL and Microsoft SQL Server databases with various authentication options including connection strings and individual credential fields.

Secret - Remove

The Secret - Remove node deletes a secret from the secure secret store. Use this node to clean up credentials that are no longer needed or to implement credential rotation workflows.

The Secret - Set node securely stores a secret value in the secret store. Secrets are encrypted at rest and can be retrieved later using the Secret - Get node. Use this node to store API keys, passwords, tokens, and other sensitive credentials.

Secret - Unwrap

The Secret - Unwrap node extracts the plain text value from a wrapped secret. While most nodes that need secrets can accept wrapped values directly, this node is useful when you need the actual string value for custom processing.