Tools and limits

Security

Stashbase MCP tools never reveal or return secret values in tool responses. Secret values remain encrypted at rest and are only accessible through dedicated secrets APIs with appropriate permissions. get_secret returns secret metadata and encrypted or contextual details, not raw plaintext secret values.

Available Tools

• get_current_auth_details
• list_projects
• get_project
• create_project
• update_project
• delete_project
• list_environments
• get_environment
• create_environment
• update_environment
• delete_environment
• list_webhooks
• get_webhook
• create_webhook
• update_webhook
• rotate_webhook_secret
• delete_webhook
• update_webhook_status
• test_webhook
• list_secrets (without values)
• get_secret (without value)
• delete_secret
• list_secrets_metadata
• get_secret_metadata

Notes

• API key permissions follow the same rules as the REST API.
• If you rotate or revoke a key, update your MCP client configuration.

Rate Limits

MCP rate limits are shared per API key and resource type: