Secret - Unwrap

Type identifier: secret:unwrap Category: Secret Operations

Note: Unwrapped secrets are plain text and can pose security risks if mishandled.

Description

The Secret - Unwrap node extracts the plain text value from a wrapped secret. While most nodes that need secrets can accept wrapped values directly, this node is useful when you need the actual string value for custom processing.

Input Handles

Handle	Type	Description
`secret`	secret (wrapped)	The wrapped secret to unwrap.

Output Handles

Handle	Type	Description
`unwrappedValue`	`string`	The unwrapped plain text secret value.

Configuration Options

This node has no additional configuration options.

Behaviour

Receives the wrapped secret on the secret input
Outputs the plain text value on unwrappedValue

Security Considerations

Warning: Unwrapped secrets are plain text strings.

When to Use

Most nodes handle wrapped secrets automatically:

Integration - HTTP: Accepts wrapped secrets for auth headers
Integration - SMTP: Accepts wrapped secrets for passwords
Integration - SQL Connect: Accepts wrapped secrets for connection strings

Use Secret - Unwrap only when:

Building custom request bodies
Performing string operations on credentials
Interfacing with nodes that don't support wrapped secrets

Examples

Inspect a Value

Secret - Get: Retrieve secret
Secret - Unwrap: Get value
Inspect value

Token Validation

Flow:

Secret - Get: Retrieve token (wrapped)
Secret - Unwrap: Get plain value
Data - Expression: Validate token format/expiry

Secret - Get

The Secret - Get node retrieves a secret value from the secure secret store. Secrets are stored encrypted and are only decrypted when needed. The retrieved value is returned as a wrapped secret that can be passed to other nodes requiring credentials.

Secret - Remove

The Secret - Remove node deletes a secret from the secure secret store. Use this node to clean up credentials that are no longer needed or to implement credential rotation workflows.

Secret - Set

The Secret - Set node securely stores a secret value in the secret store. Secrets are encrypted at rest and can be retrieved later using the Secret - Get node. Use this node to store API keys, passwords, tokens, and other sensitive credentials.