---
title: "Classify secret variable names before sending tool arguments"
method: POST
path: "/platform/secret-entry-policy"
tags: ["Platform"]
---

# Classify secret variable names before sending tool arguments

`POST /platform/secret-entry-policy`

## Request

- Base URL: `https://api.imprezahost.com/v1`
- URL: `https://api.imprezahost.com/v1/platform/secret-entry-policy`
- Auth: API key in header `X-API-Key` and API key in header `X-API-Secret`

Read scope. Send only deployment_id, app_name with optional app_version, or project_id with optional environment_id. Returns secret_names, never values. Used by the local MCP to refuse declared or stored secrets before sending their values to REST.

## Request body

- union
  - object
    - `deployment_id` string, required
    - `app_name` string
    - `app_version` string
    - `project_id` string
    - `environment_id` string
  - object
    - `deployment_id` string
    - `app_name` string, required
    - `app_version` string
    - `project_id` string
    - `environment_id` string
  - object
    - `deployment_id` string
    - `app_name` string
    - `app_version` string
    - `project_id` string, required
    - `environment_id` string

## Response `200`

Secret variable names for the accessible target

## Other responses

- `404`: Target unavailable

---

[API](https://skmtc.dev/imprezahost/apis/impreza-host-public-api.md) · [All operations](https://skmtc.dev/imprezahost/apis/impreza-host-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/imprezahost/apis/impreza-host-public-api/revisions/db86511f604f?raw)