id: delinea_secret_server
name: Delinea Secret Server
version: 1.0.0
description: "Delinea Secret Server (REST API v1) — privileged-credential retrieval for IR: search secrets, read a secret, read a specific secret field, and list folders. OAuth2 password-grant authentication; stdlib-only, no extra Python dependencies."
changelog: "1.0.0 — Initial release: search secrets, get secret, get secret field, list folders."
category: identity

# Per-instance configuration. Credentials are exchanged for a bearer token at
# /SecretServer/oauth2/token; API calls go to /SecretServer/api/v1.
config_schema:
  properties:
    base_url:
      type: string
      description: "Secret Server URL (e.g. https://tenant.secretservercloud.com)"
    username:
      type: string
      description: "Secret Server username"
    password:
      type: string
      description: "Secret Server password"
      x-soar-sensitive: true
    insecure:
      type: boolean
      description: "Trust any TLS certificate (not secure)"
      default: false
  required:
    - base_url
    - username
    - password

commands:
  - id: search_secrets
    name: delinea-search-secrets
    description: "Search secrets by text."
    risk: read
    inputs_schema:
      properties:
        search_text: { type: string, description: "Text to match in secret names" }
        limit: { type: number, description: "Max secrets (default 25)" }
      required: []
    outputs_schema: { properties: {} }
  - id: get_secret
    name: delinea-get-secret
    description: "Get a secret (with its fields) by ID."
    inputs_schema:
      properties:
        secret_id: { type: string, description: "Secret ID" }
      required: [secret_id]
    outputs_schema: { properties: {} }
  - id: get_secret_field
    name: delinea-get-secret-field
    description: "Get a single field's value from a secret (e.g. password)."
    inputs_schema:
      properties:
        secret_id: { type: string, description: "Secret ID" }
        field_slug: { type: string, description: "Field slug (e.g. password, username)" }
      required: [secret_id, field_slug]
    outputs_schema: { properties: {} }
  - id: list_folders
    name: delinea-list-folders
    description: "List folders."
    risk: read
    inputs_schema:
      properties:
        limit: { type: number, description: "Max folders (default 25)" }
      required: []
    outputs_schema: { properties: {} }

  - id: test_connection
    name: delinea-test-connection
    description: "Verify credentials via the token exchange (used by the Test button)."
    risk: read
    inputs_schema:
      properties: {}
      required: []
    outputs_schema: { properties: {} }