# Doppler

Doppler is a secrets management platform that helps developers organize and sync environment variables across teams and infrastructure.

- **Category:** developer tools
- **Auth:** API_KEY
- **Tools:** 63
- **Triggers:** 0
- **Slug:** `DOPPLER`
- **Version:** 20260217_00

## Tools

### List Activity Logs

**Slug:** `DOPPLER_ACTIVITY_LOGS_LIST`

List workplace activity logs with pagination support. Retrieves a paginated list of activity logs showing actions performed by users and bots in your Doppler workplace, such as creating projects, modifying secrets, generating tokens, and other workspace events. Each log entry includes details about the actor, timestamp, and affected resources. Use this tool when you need to audit workplace activity, track changes, or investigate who performed specific actions.

### Get Activity Log

**Slug:** `DOPPLER_ACTIVITY_LOGS_RETRIEVE`

Retrieve detailed information about a specific activity log entry. Activity logs track all actions performed in the Doppler workplace including project creation, secret modifications, user actions, etc. Use the List Activity Logs action to discover available log IDs.

### Add Webhook

**Slug:** `DOPPLER_ADD_WEBHOOK`

Tool to create a new webhook for a Doppler project. Use when you need to configure webhook notifications for secret changes or other events in a project. The webhook URL must use HTTPS. Optionally configure authentication, specific configs to monitor, custom payload templates, or request signing secrets.

### Get Authenticated User Info

**Slug:** `DOPPLER_AUTH_ME`

Tool to retrieve information about the authenticated user or token. Use when you need to verify authentication status or get details about the current token's workplace and permissions.

### Get Config Log

**Slug:** `DOPPLER_CONFIG_LOGS_GET`

Tool to retrieve a specific config log from Doppler. Use when you need to view details about a particular configuration change or event.

### List Config Logs

**Slug:** `DOPPLER_CONFIG_LOGS_LIST`

Tool to retrieve configuration change logs for a specific config in a project. Use when you need to view the history of configuration changes, track who made changes, or identify rollback actions.

### Rollback Config Log

**Slug:** `DOPPLER_CONFIG_LOGS_ROLLBACK`

Tool to rollback a config to a selected log version. Use when needing to undo a specific change by its log ID, after confirming project, config, and log ID.

### Clone Config

**Slug:** `DOPPLER_CONFIGS_CLONE`

Tool to clone a branch config including all its secrets. Use after confirming the source config details.

### Create Config

**Slug:** `DOPPLER_CONFIGS_CREATE`

Tool to create a branch config. Use when you need to programmatically establish a new branch-based configuration for a specified project and environment. The config name MUST start with the environment identifier followed by an underscore (e.g., 'dev_feature' for dev environment). Use after selecting the target project and environment.

### Delete Config

**Slug:** `DOPPLER_CONFIGS_DELETE`

Tool to delete a config permanently. Use when you need to remove a config that is no longer needed.

### Get Config

**Slug:** `DOPPLER_CONFIGS_GET`

Tool to retrieve a specific Doppler config by project and config name. Use when you need to get configuration details for a specific project environment.

### List Doppler Configs

**Slug:** `DOPPLER_CONFIGS_LIST`

Tool to list configurations from a Doppler project. Use when you need to retrieve all configs or filter by environment. Supports pagination for large result sets.

### Lock Config

**Slug:** `DOPPLER_CONFIGS_LOCK`

Lock a Doppler config to prevent it from being renamed or deleted. Locking provides protection against accidental modifications to critical configurations. Use this after confirming the correct project and config identifiers.

### Unlock Config

**Slug:** `DOPPLER_CONFIGS_UNLOCK`

Tool to unlock a config. Use when you need to allow renaming or deletion of a previously locked config.

### Update Config

**Slug:** `DOPPLER_CONFIGS_UPDATE`

Rename an existing Doppler config within a project. This action modifies the config's name while preserving all secrets and settings. Before using this action: 1. Use DOPPLER_PROJECTS_LIST to get the project identifier 2. Use DOPPLER_CONFIGS_LIST to verify the config exists and get its current name 3. Ensure the new name is unique within the project Note: Root configs and locked configs cannot be renamed.

### Create Encrypted Share Link

**Slug:** `DOPPLER_CREATE_ENCRYPTED`

Create a Doppler Share link for an end-to-end encrypted secret. This tool generates a secure, shareable link where the secret is encrypted client-side and decrypted in the recipient's browser, ensuring Doppler never has access to the plaintext. Use this when you need to securely share sensitive information (API keys, passwords, credentials) with controlled expiration. The secret must be pre-encrypted using AES-256-GCM with PBKDF2-SHA256 key derivation before calling this tool. Security features: - End-to-end encryption: Secret is never exposed to Doppler's servers - Configurable expiration: Set limits on views (1-50 or unlimited) and days (1-90) - Password-protected: Recipients must enter the correct password to decrypt

### Create Plain Text Share Link

**Slug:** `DOPPLER_CREATE_PLAIN`

Tool to generate a Doppler Share link by sending a plain text secret. Use when you need to securely share secrets with expiration controls. The secret is not stored in plain text by Doppler; the receive flow is end-to-end encrypted where the encrypted secret is decrypted in the browser.

### Create Service Token

**Slug:** `DOPPLER_CREATE_SERVICE_TOKEN`

Tool to create a new service token for a Doppler config. Use when you need to generate API credentials for services to access secrets programmatically. The token grants either read-only or read/write access to the specified config. Store the returned token key securely as it cannot be retrieved later.

### Delete Service Token

**Slug:** `DOPPLER_DELETE_SERVICE_TOKEN`

Tool to delete an existing service token from a Doppler config. Use when you need to revoke or remove a service token that is no longer needed.

### Delete Webhook

**Slug:** `DOPPLER_DELETE_WEBHOOK`

Tool to delete an existing webhook. Use when you need to permanently remove a webhook from a project.

### Disable Webhook

**Slug:** `DOPPLER_DISABLE_WEBHOOK`

Tool to disable an existing Doppler webhook. Use when you need to temporarily stop a webhook from receiving notifications without deleting it.

### Revoke Dynamic Secret Lease

**Slug:** `DOPPLER_DYNAMIC_SECRETS_REVOKE_LEASE`

Revoke a dynamic secret lease immediately before its TTL expires. Use this tool when you need to terminate access to a dynamic secret (e.g., AWS IAM user, database credentials) by invalidating its active lease. This is useful for security purposes when access should be revoked before the natural expiration time. Prerequisites: The lease must have been previously issued via the secrets list or download endpoints with include_dynamic_secrets=true.

### Enable Webhook

**Slug:** `DOPPLER_ENABLE_WEBHOOK`

Tool to enable a previously disabled webhook. Use when you need to reactivate a webhook that was temporarily disabled.

### Create Environment

**Slug:** `DOPPLER_ENVIRONMENTS_CREATE`

Create a new environment in a Doppler project. Environments (like dev, staging, prod) organize different configurations within a project. Use this when you need to set up a new deployment environment for secrets management. Each environment requires a unique slug within the project.

### Delete Environment

**Slug:** `DOPPLER_ENVIRONMENTS_DELETE`

Tool to delete an environment. Use when you need to remove an environment from a project after confirming it's no longer in use.

### Get Environment

**Slug:** `DOPPLER_ENVIRONMENTS_GET`

Retrieves detailed metadata for a specific Doppler environment within a project. Use this to get information about an environment including its name, creation date, first fetch timestamp, and personal configs setting. You must provide both the project slug and environment slug.

### List Environments

**Slug:** `DOPPLER_ENVIRONMENTS_LIST`

Tool to list all environments in a Doppler project. Use when you need to retrieve the environments available in a specific project.

### Rename Environment

**Slug:** `DOPPLER_ENVIRONMENTS_RENAME`

Rename an environment's display name within a Doppler project. This updates only the human-readable name; the environment slug remains unchanged. Use this when you need to update how an environment appears in the UI without affecting its identifier.

### Get Webhook

**Slug:** `DOPPLER_GET_WEBHOOK`

Tool to retrieve an existing webhook by its slug. Use when you need to get webhook details including URL, authentication settings, enabled status, and payload configuration.

### Get Workplace User

**Slug:** `DOPPLER_GET_WORKPLACE_USER`

Tool to retrieve a specific workplace user by their workplace_user id. Use when you need to get detailed information about a workplace user including their access level, creation date, and nested user details.

### Remove Group Member

**Slug:** `DOPPLER_GROUPS_DELETE_MEMBER`

Remove a member from a Doppler group. This permanently removes the specified member (workplace_user, group, invite, or service_account) from the group. Requires valid group and member slugs. Returns 204 status code on success.

### List Integrations

**Slug:** `DOPPLER_INTEGRATIONS_LIST`

Tool to retrieve all existing integrations in Doppler. Use when you need to list all configured integrations.

### List Invites

**Slug:** `DOPPLER_INVITES_LIST`

Tool to list open workplace invites. Use when you need to retrieve all pending invitations for the current Doppler workplace after authenticating.

### List Change Requests

**Slug:** `DOPPLER_LIST_CHANGE_REQUESTS`

List existing change requests in the Doppler workplace. Use this tool to retrieve all change requests and view their current status. Change requests are a workflow-driven mechanism for proposing additions, modifications, or deletions of values stored in Doppler, which require review and approval from authorized team members. Note: This feature requires a Team or Enterprise plan. Attempting to use this endpoint with a Free or Starter plan will result in a 403 Forbidden error.

### List Project Members

**Slug:** `DOPPLER_LIST_PROJECT_MEMBERS`

Tool to list all members of a Doppler project including users, groups, service accounts, and invites. Use when you need to retrieve all members with their roles and environment access permissions for a specific project.

### List Service Tokens

**Slug:** `DOPPLER_LIST_SERVICE_TOKENS`

Tool to list all service tokens for a specific Doppler config. Use when you need to view existing API credentials and their access levels.

### List Workplace Users

**Slug:** `DOPPLER_LIST_USERS`

Tool to list all users in the Doppler workplace. Use when you need to retrieve user information, check user access levels, or filter users by email address.

### List Webhooks

**Slug:** `DOPPLER_LIST_WEBHOOKS`

Tool to list all webhooks configured for a Doppler project. Use when you need to retrieve all webhooks or check webhook configurations for a specific project.

### Remove Project Member

**Slug:** `DOPPLER_PROJECT_MEMBERS_DELETE`

Tool to remove a member from a project. Use after confirming project slug, member type, and slug.

### Get Project Member

**Slug:** `DOPPLER_PROJECT_MEMBERS_GET`

Retrieve a specific project member's details including their role and environment access permissions. Use this when you need to check a specific user's, group's, service account's, or invite's membership settings in a project. Requires the project slug, member type (workplace_user/group/invite/service_account), and member slug (UUID).

### List Project Permissions

**Slug:** `DOPPLER_PROJECT_PERMISSIONS_LIST`

List all available project-level permissions in Doppler. Returns permission identifiers (slugs) that can be assigned to project roles when creating or updating custom roles. Use this to discover what permissions are available before configuring project role access.

### Get Project Role

**Slug:** `DOPPLER_PROJECT_ROLES_GET`

Retrieve detailed information about a specific project role in Doppler, including its permissions, display name, identifier, creation timestamp, and whether it's a custom or built-in role. Use this to understand what permissions a role grants before assigning it to users or groups.

### List Project Roles

**Slug:** `DOPPLER_PROJECT_ROLES_LIST`

Tool to list all available project roles in Doppler. Use when you need to retrieve all roles for permission management or to see what roles are available.

### List Project Role Permissions

**Slug:** `DOPPLER_PROJECT_ROLES_LIST_PERMISSIONS`

Tool to list all available permissions for project roles in Doppler. Use when you need to see what permissions can be assigned to custom project roles.

### Create Project

**Slug:** `DOPPLER_PROJECTS_CREATE`

Tool to create a project. Use when you need to programmatically initialize a new Doppler project after authentication.

### Delete Project

**Slug:** `DOPPLER_PROJECTS_DELETE`

Tool to delete a project permanently. Use after confirming irreversible removal.

### Get Project Details

**Slug:** `DOPPLER_PROJECTS_GET`

Tool to retrieve details of a specific Doppler project by its identifier. Use when you need to get project metadata including ID, slug, name, description, and creation timestamp.

### List Doppler Projects

**Slug:** `DOPPLER_PROJECTS_LIST`

Tool to list all Doppler projects in your workspace. Use when you need to retrieve available projects for configuration management or to get project details.

### Delete Secret

**Slug:** `DOPPLER_SECRETS_DELETE`

Tool to delete a secret from a Doppler config. Use when you need to permanently remove a secret from a specific project and config.

### Download Secrets

**Slug:** `DOPPLER_SECRETS_DOWNLOAD`

Tool to download secrets from a Doppler config in various formats. Use when you need to retrieve all secrets or a subset of secrets from a specific project and config. Supports multiple output formats and name transformations.

### Get Secret

**Slug:** `DOPPLER_SECRETS_GET`

Tool to retrieve a specific secret from a Doppler project config. Use when you need to get the value of a specific secret including its raw and computed values.

### List Doppler Secrets

**Slug:** `DOPPLER_SECRETS_LIST`

Tool to list all secrets for a specific Doppler config within a project. Use when you need to retrieve secret values and metadata. Returns both raw and computed values for each secret, along with visibility settings and optional notes.

### List Secret Names

**Slug:** `DOPPLER_SECRETS_NAMES`

Tool to retrieve the list of secret names from a specific Doppler config. Use when you need to list available secret names without their values.

### Update Doppler Secrets

**Slug:** `DOPPLER_SECRETS_UPDATE`

Tool to update secrets in a Doppler config. Use when you need to create or update secret values in a specific project and config.

### Update Secret Note

**Slug:** `DOPPLER_SECRETS_UPDATE_NOTE`

Tool to update a note for a secret in Doppler. Use when you need to add or modify documentation for a specific secret. Notes are stored at the project level and apply across all environments, though a config parameter is required for the API call. Notes help document secret usage, provide context, or store reference links.

### Update Project

**Slug:** `DOPPLER_UPDATE_PROJECT`

Tool to update an existing Doppler project's name or description. Use when you need to rename a project or modify its description after it has been created.

### Update Secret Note

**Slug:** `DOPPLER_UPDATE_SECRET_NOTE`

Tool to set or update a note for a secret in Doppler. Use when you need to add or modify documentation for a specific secret. Notes are stored at the project level and apply across all environments.

### Update Webhook

**Slug:** `DOPPLER_UPDATE_WEBHOOK`

Tool to update an existing webhook configuration in Doppler. Use when you need to modify webhook URL, authentication, enabled configs, or other webhook settings.

### Update Workplace Settings

**Slug:** `DOPPLER_UPDATE_WORKPLACE`

Tool to update workplace settings in Doppler. Use when you need to modify workplace name, billing email, or security email. At least one field must be provided to update.

### Get Workplace Information

**Slug:** `DOPPLER_WORKPLACE_GET`

Tool to retrieve workplace information from Doppler. Use when you need to get workplace details including ID, name, billing email, and security email.

### Get Workplace Role

**Slug:** `DOPPLER_WORKPLACE_ROLES_GET`

Tool to retrieve workplace role information from Doppler. Use when you need to get details about a specific role including its permissions and metadata.

### List Workplace Roles

**Slug:** `DOPPLER_WORKPLACE_ROLES_LIST`

Tool to list all workplace roles in your Doppler workspace. Use when you need to retrieve available workplace roles for user management or permission configuration.

### List Workplace Permissions

**Slug:** `DOPPLER_WORKPLACE_ROLES_LIST_PERMISSIONS`

Retrieves all available workplace permissions in Doppler. This action returns a comprehensive list of permission identifiers that can be assigned to workplace roles. Workplace permissions control access to organization-level features such as billing, team management, service accounts, integrations, audit logs, and other workplace settings. Use this action when you need to: - View all available permissions for workplace role configuration - Understand what permissions can be assigned to custom workplace roles - Audit the permission system capabilities in your Doppler workplace No parameters are required. This is a read-only, idempotent operation.
