doppler.api.* operation is listed below with parameter shapes and return types from the plugin Zod schemas.
Activity Logs
list
activityLogs.list
List workplace activity log entries
Risk: read
logs full type
logs full type
retrieve
activityLogs.retrieve
Retrieve a single activity log entry
Risk: read
user full type
user full type
diff full type
diff full type
Auth
me
auth.me
Read information about the authenticated token
Risk: read
workplace full type
workplace full type
principal full type
principal full type
Change Requests
list
changeRequests.list
List change requests (Team/Enterprise plans only)
Risk: read
object[]
Output full type
Output full type
Config Logs
get
configLogs.get
Retrieve a config log entry, including its secret diff
Risk: read
user full type
user full type
diff full type
diff full type
list
configLogs.list
List a config’s change-log entries
Risk: read
logs full type
logs full type
rollback
configLogs.rollback
Roll a config back to a prior log entry’s state
Risk: write
user full type
user full type
diff full type
diff full type
Configs
clone
configs.clone
Clone a config into a new branch config
Risk: write
create
configs.create
Create a branch config within an environment
Risk: write
delete
configs.delete
Permanently delete a config and its secrets
Risk: destructive
get
configs.get
Retrieve a config
Risk: read
list
configs.list
List a project’s configs
Risk: read
configs full type
configs full type
lock
configs.lock
Lock a config so it cannot be renamed or deleted
Risk: write
unlock
configs.unlock
Unlock a config so it can be renamed or deleted
Risk: write
update
configs.update
Rename a config
Risk: write
Dynamic Secrets
revokeLease
dynamicSecrets.revokeLease
Revoke a leased dynamic secret credential
Risk: destructive
Environments
create
environments.create
Create an environment within a project
Risk: write
delete
environments.delete
Permanently delete an environment and its configs
Risk: destructive
get
environments.get
Retrieve an environment
Risk: read
list
environments.list
List a project’s environments
Risk: read
object[]
Output full type
Output full type
rename
environments.rename
Rename an environment’s display name or slug
Risk: write
Groups
deleteMember
groups.deleteMember
Remove a member from a workplace group
Risk: destructive
Integrations
list
integrations.list
List third-party integrations
Risk: read
object[]
Output full type
Output full type
Invites
list
invites.list
List pending workplace invites
Risk: read
invites full type
invites full type
Project Members
delete
projectMembers.delete
Remove a member from a project
Risk: destructive
get
projectMembers.get
Retrieve a project member
Risk: read
role full type
role full type
list
projectMembers.list
List a project’s members
Risk: read
members full type
members full type
Project Roles
get
projectRoles.get
Retrieve a project-level role
Risk: read
list
projectRoles.list
List project-level roles
Risk: read
object[]
Output full type
Output full type
listPermissions
projectRoles.listPermissions
List permissions grantable to a project-level role
Risk: read
string[]
Projects
create
projects.create
Create a project
Risk: write
delete
projects.delete
Permanently delete a project and everything in it
Risk: destructive
get
projects.get
Retrieve a project
Risk: read
list
projects.list
List projects
Risk: read
projects full type
projects full type
update
projects.update
Update a project’s name or description
Risk: write
Secrets
delete
secrets.delete
Delete a secret
Risk: destructive
download
secrets.download
Download a config’s secrets in a given format
Risk: read
object
Output full type
Output full type
get
secrets.get
Retrieve a single secret’s value
Risk: read
rawValueType full type
rawValueType full type
computedValueType full type
computedValueType full type
list
secrets.list
List a config’s secrets, values included
Risk: read
object
Output full type
Output full type
names
secrets.names
List a config’s secret names, without values
Risk: read
string[]
update
secrets.update
Bulk-set (or delete, via null) secrets in a config
Risk: write
secrets full type
secrets full type
object
Output full type
Output full type
updateNote
secrets.updateNote
Set a secret’s note (project-scoped route)
Risk: write
updateNoteViaConfig
secrets.updateNoteViaConfig
Set a secret’s note (config-scoped route)
Risk: write
Service Tokens
create
serviceTokens.create
Create a service token for a config
Risk: write
delete
serviceTokens.delete
Revoke a service token
Risk: destructive
list
serviceTokens.list
List a config’s service tokens
Risk: read
object[]
Output full type
Output full type
Share
createEncrypted
share.createEncrypted
Create a Doppler Share link from a caller-encrypted payload (zero-knowledge)
Risk: write
createPlain
share.createPlain
Create a Doppler Share link from a plaintext secret
Risk: write
Webhooks
add
webhooks.add
Create a webhook
Risk: write
authentication full type
authentication full type
delete
webhooks.delete
Permanently delete a webhook
Risk: destructive
disable
webhooks.disable
Disable a webhook
Risk: write
enable
webhooks.enable
Enable a webhook
Risk: write
get
webhooks.get
Retrieve a webhook
Risk: read
list
webhooks.list
List webhooks
Risk: read
object[]
Output full type
Output full type
update
webhooks.update
Update a webhook
Risk: write
authentication full type
authentication full type
Workplace
get
workplace.get
Retrieve the workplace
Risk: read
update
workplace.update
Update the workplace’s name, billing email, or security email
Risk: write
Workplace Roles
get
workplaceRoles.get
Retrieve a workplace role
Risk: read
list
workplaceRoles.list
List workplace roles
Risk: read
object[]
Output full type
Output full type
listPermissions
workplaceRoles.listPermissions
List permissions grantable to a workplace role
Risk: read
string[]
Workplace Users
get
workplaceUsers.get
Retrieve a workplace user by id
Risk: read
user full type
user full type
list
workplaceUsers.list
List users in the workplace
Risk: read
workplace_users full type
workplace_users full type