published on Monday, Aug 10, 2026 by akeyless-community
published on Monday, Aug 10, 2026 by akeyless-community
MCP secret using OAuth 2.0 Client Credentials authentication
Create McpSecretOauthClientCredentials Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new McpSecretOauthClientCredentials(name: string, args?: McpSecretOauthClientCredentialsArgs, opts?: CustomResourceOptions);@overload
def McpSecretOauthClientCredentials(resource_name: str,
args: Optional[McpSecretOauthClientCredentialsArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def McpSecretOauthClientCredentials(resource_name: str,
opts: Optional[ResourceOptions] = None,
accessibility: Optional[str] = None,
delete_protection: Optional[str] = None,
description: Optional[str] = None,
input_rules: Optional[Sequence[str]] = None,
keep_prev_version: Optional[str] = None,
max_versions: Optional[str] = None,
mcp_secret_oauth_client_credentials_id: Optional[str] = None,
name: Optional[str] = None,
oauth_client_id: Optional[str] = None,
oauth_client_secret: Optional[str] = None,
oauth_scopes: Optional[Sequence[str]] = None,
oauth_token_url: Optional[str] = None,
output_rules: Optional[Sequence[str]] = None,
protection_key: Optional[str] = None,
tags: Optional[Sequence[str]] = None,
url: Optional[str] = None)func NewMcpSecretOauthClientCredentials(ctx *Context, name string, args *McpSecretOauthClientCredentialsArgs, opts ...ResourceOption) (*McpSecretOauthClientCredentials, error)public McpSecretOauthClientCredentials(string name, McpSecretOauthClientCredentialsArgs? args = null, CustomResourceOptions? opts = null)
public McpSecretOauthClientCredentials(String name, McpSecretOauthClientCredentialsArgs args)
public McpSecretOauthClientCredentials(String name, McpSecretOauthClientCredentialsArgs args, CustomResourceOptions options)
type: akeyless:McpSecretOauthClientCredentials
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "akeyless_mcp_secret_oauth_client_credentials" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args McpSecretOauthClientCredentialsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args McpSecretOauthClientCredentialsArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args McpSecretOauthClientCredentialsArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args McpSecretOauthClientCredentialsArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args McpSecretOauthClientCredentialsArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var mcpSecretOauthClientCredentialsResource = new Akeyless.McpSecretOauthClientCredentials("mcpSecretOauthClientCredentialsResource", new()
{
Accessibility = "string",
DeleteProtection = "string",
Description = "string",
InputRules = new[]
{
"string",
},
KeepPrevVersion = "string",
MaxVersions = "string",
McpSecretOauthClientCredentialsId = "string",
Name = "string",
OauthClientId = "string",
OauthClientSecret = "string",
OauthScopes = new[]
{
"string",
},
OauthTokenUrl = "string",
OutputRules = new[]
{
"string",
},
ProtectionKey = "string",
Tags = new[]
{
"string",
},
Url = "string",
});
example, err := akeyless.NewMcpSecretOauthClientCredentials(ctx, "mcpSecretOauthClientCredentialsResource", &akeyless.McpSecretOauthClientCredentialsArgs{
Accessibility: pulumi.String("string"),
DeleteProtection: pulumi.String("string"),
Description: pulumi.String("string"),
InputRules: pulumi.StringArray{
pulumi.String("string"),
},
KeepPrevVersion: pulumi.String("string"),
MaxVersions: pulumi.String("string"),
McpSecretOauthClientCredentialsId: pulumi.String("string"),
Name: pulumi.String("string"),
OauthClientId: pulumi.String("string"),
OauthClientSecret: pulumi.String("string"),
OauthScopes: pulumi.StringArray{
pulumi.String("string"),
},
OauthTokenUrl: pulumi.String("string"),
OutputRules: pulumi.StringArray{
pulumi.String("string"),
},
ProtectionKey: pulumi.String("string"),
Tags: pulumi.StringArray{
pulumi.String("string"),
},
Url: pulumi.String("string"),
})
resource "akeyless_mcp_secret_oauth_client_credentials" "mcpSecretOauthClientCredentialsResource" {
lifecycle {
create_before_destroy = true
}
accessibility = "string"
delete_protection = "string"
description = "string"
input_rules = ["string"]
keep_prev_version = "string"
max_versions = "string"
mcp_secret_oauth_client_credentials_id = "string"
name = "string"
oauth_client_id = "string"
oauth_client_secret = "string"
oauth_scopes = ["string"]
oauth_token_url = "string"
output_rules = ["string"]
protection_key = "string"
tags = ["string"]
url = "string"
}
var mcpSecretOauthClientCredentialsResource = new McpSecretOauthClientCredentials("mcpSecretOauthClientCredentialsResource", McpSecretOauthClientCredentialsArgs.builder()
.accessibility("string")
.deleteProtection("string")
.description("string")
.inputRules("string")
.keepPrevVersion("string")
.maxVersions("string")
.mcpSecretOauthClientCredentialsId("string")
.name("string")
.oauthClientId("string")
.oauthClientSecret("string")
.oauthScopes("string")
.oauthTokenUrl("string")
.outputRules("string")
.protectionKey("string")
.tags("string")
.url("string")
.build());
mcp_secret_oauth_client_credentials_resource = akeyless.McpSecretOauthClientCredentials("mcpSecretOauthClientCredentialsResource",
accessibility="string",
delete_protection="string",
description="string",
input_rules=["string"],
keep_prev_version="string",
max_versions="string",
mcp_secret_oauth_client_credentials_id="string",
name="string",
oauth_client_id="string",
oauth_client_secret="string",
oauth_scopes=["string"],
oauth_token_url="string",
output_rules=["string"],
protection_key="string",
tags=["string"],
url="string")
const mcpSecretOauthClientCredentialsResource = new akeyless.McpSecretOauthClientCredentials("mcpSecretOauthClientCredentialsResource", {
accessibility: "string",
deleteProtection: "string",
description: "string",
inputRules: ["string"],
keepPrevVersion: "string",
maxVersions: "string",
mcpSecretOauthClientCredentialsId: "string",
name: "string",
oauthClientId: "string",
oauthClientSecret: "string",
oauthScopes: ["string"],
oauthTokenUrl: "string",
outputRules: ["string"],
protectionKey: "string",
tags: ["string"],
url: "string",
});
type: akeyless:McpSecretOauthClientCredentials
properties:
accessibility: string
deleteProtection: string
description: string
inputRules:
- string
keepPrevVersion: string
maxVersions: string
mcpSecretOauthClientCredentialsId: string
name: string
oauthClientId: string
oauthClientSecret: string
oauthScopes:
- string
oauthTokenUrl: string
outputRules:
- string
protectionKey: string
tags:
- string
url: string
McpSecretOauthClientCredentials Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The McpSecretOauthClientCredentials resource accepts the following input properties:
- Accessibility string
- For personal password manager
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Input
Rules List<string> - Agentic input rule in name=...,rule=... format
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- Mcp
Secret stringOauth Client Credentials Id - The ID of this resource.
- Name string
- Secret name
- Oauth
Client stringId - OAuth client ID
- Oauth
Client stringSecret - OAuth client secret
- Oauth
Scopes List<string> - OAuth scopes
- Oauth
Token stringUrl - OAuth token URL
- Output
Rules List<string> - Agentic output rule in name=...,rule=... format
- Protection
Key string - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- List<string>
- List of the tags attached to this secret
- Url string
- URL of the MCP service
- Accessibility string
- For personal password manager
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Input
Rules []string - Agentic input rule in name=...,rule=... format
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- Mcp
Secret stringOauth Client Credentials Id - The ID of this resource.
- Name string
- Secret name
- Oauth
Client stringId - OAuth client ID
- Oauth
Client stringSecret - OAuth client secret
- Oauth
Scopes []string - OAuth scopes
- Oauth
Token stringUrl - OAuth token URL
- Output
Rules []string - Agentic output rule in name=...,rule=... format
- Protection
Key string - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- []string
- List of the tags attached to this secret
- Url string
- URL of the MCP service
- accessibility string
- For personal password manager
- delete_
protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- input_
rules list(string) - Agentic input rule in name=...,rule=... format
- keep_
prev_ stringversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- max_
versions string - Set the maximum number of versions, limited by the account settings defaults
- mcp_
secret_ stringoauth_ client_ credentials_ id - The ID of this resource.
- name string
- Secret name
- oauth_
client_ stringid - OAuth client ID
- oauth_
client_ stringsecret - OAuth client secret
- oauth_
scopes list(string) - OAuth scopes
- oauth_
token_ stringurl - OAuth token URL
- output_
rules list(string) - Agentic output rule in name=...,rule=... format
- protection_
key string - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- list(string)
- List of the tags attached to this secret
- url string
- URL of the MCP service
- accessibility String
- For personal password manager
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- input
Rules List<String> - Agentic input rule in name=...,rule=... format
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults
- mcp
Secret StringOauth Client Credentials Id - The ID of this resource.
- name String
- Secret name
- oauth
Client StringId - OAuth client ID
- oauth
Client StringSecret - OAuth client secret
- oauth
Scopes List<String> - OAuth scopes
- oauth
Token StringUrl - OAuth token URL
- output
Rules List<String> - Agentic output rule in name=...,rule=... format
- protection
Key String - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- List<String>
- List of the tags attached to this secret
- url String
- URL of the MCP service
- accessibility string
- For personal password manager
- delete
Protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- input
Rules string[] - Agentic input rule in name=...,rule=... format
- keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- mcp
Secret stringOauth Client Credentials Id - The ID of this resource.
- name string
- Secret name
- oauth
Client stringId - OAuth client ID
- oauth
Client stringSecret - OAuth client secret
- oauth
Scopes string[] - OAuth scopes
- oauth
Token stringUrl - OAuth token URL
- output
Rules string[] - Agentic output rule in name=...,rule=... format
- protection
Key string - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- string[]
- List of the tags attached to this secret
- url string
- URL of the MCP service
- accessibility str
- For personal password manager
- delete_
protection str - Protection from accidental deletion of this object [true/false]
- description str
- Description of the object
- input_
rules Sequence[str] - Agentic input rule in name=...,rule=... format
- keep_
prev_ strversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- max_
versions str - Set the maximum number of versions, limited by the account settings defaults
- mcp_
secret_ stroauth_ client_ credentials_ id - The ID of this resource.
- name str
- Secret name
- oauth_
client_ strid - OAuth client ID
- oauth_
client_ strsecret - OAuth client secret
- oauth_
scopes Sequence[str] - OAuth scopes
- oauth_
token_ strurl - OAuth token URL
- output_
rules Sequence[str] - Agentic output rule in name=...,rule=... format
- protection_
key str - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- Sequence[str]
- List of the tags attached to this secret
- url str
- URL of the MCP service
- accessibility String
- For personal password manager
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- input
Rules List<String> - Agentic input rule in name=...,rule=... format
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults
- mcp
Secret StringOauth Client Credentials Id - The ID of this resource.
- name String
- Secret name
- oauth
Client StringId - OAuth client ID
- oauth
Client StringSecret - OAuth client secret
- oauth
Scopes List<String> - OAuth scopes
- oauth
Token StringUrl - OAuth token URL
- output
Rules List<String> - Agentic output rule in name=...,rule=... format
- protection
Key String - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- List<String>
- List of the tags attached to this secret
- url String
- URL of the MCP service
Outputs
All input properties are implicitly available as output properties. Additionally, the McpSecretOauthClientCredentials resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing McpSecretOauthClientCredentials Resource
Get an existing McpSecretOauthClientCredentials resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: McpSecretOauthClientCredentialsState, opts?: CustomResourceOptions): McpSecretOauthClientCredentials@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
accessibility: Optional[str] = None,
delete_protection: Optional[str] = None,
description: Optional[str] = None,
input_rules: Optional[Sequence[str]] = None,
keep_prev_version: Optional[str] = None,
max_versions: Optional[str] = None,
mcp_secret_oauth_client_credentials_id: Optional[str] = None,
name: Optional[str] = None,
oauth_client_id: Optional[str] = None,
oauth_client_secret: Optional[str] = None,
oauth_scopes: Optional[Sequence[str]] = None,
oauth_token_url: Optional[str] = None,
output_rules: Optional[Sequence[str]] = None,
protection_key: Optional[str] = None,
tags: Optional[Sequence[str]] = None,
url: Optional[str] = None) -> McpSecretOauthClientCredentialsfunc GetMcpSecretOauthClientCredentials(ctx *Context, name string, id IDInput, state *McpSecretOauthClientCredentialsState, opts ...ResourceOption) (*McpSecretOauthClientCredentials, error)public static McpSecretOauthClientCredentials Get(string name, Input<string> id, McpSecretOauthClientCredentialsState? state, CustomResourceOptions? opts = null)public static McpSecretOauthClientCredentials get(String name, Output<String> id, McpSecretOauthClientCredentialsState state, CustomResourceOptions options)resources: _: type: akeyless:McpSecretOauthClientCredentials get: id: ${id}import {
to = akeyless_mcp_secret_oauth_client_credentials.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Accessibility string
- For personal password manager
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Input
Rules List<string> - Agentic input rule in name=...,rule=... format
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- Mcp
Secret stringOauth Client Credentials Id - The ID of this resource.
- Name string
- Secret name
- Oauth
Client stringId - OAuth client ID
- Oauth
Client stringSecret - OAuth client secret
- Oauth
Scopes List<string> - OAuth scopes
- Oauth
Token stringUrl - OAuth token URL
- Output
Rules List<string> - Agentic output rule in name=...,rule=... format
- Protection
Key string - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- List<string>
- List of the tags attached to this secret
- Url string
- URL of the MCP service
- Accessibility string
- For personal password manager
- Delete
Protection string - Protection from accidental deletion of this object [true/false]
- Description string
- Description of the object
- Input
Rules []string - Agentic input rule in name=...,rule=... format
- Keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- Max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- Mcp
Secret stringOauth Client Credentials Id - The ID of this resource.
- Name string
- Secret name
- Oauth
Client stringId - OAuth client ID
- Oauth
Client stringSecret - OAuth client secret
- Oauth
Scopes []string - OAuth scopes
- Oauth
Token stringUrl - OAuth token URL
- Output
Rules []string - Agentic output rule in name=...,rule=... format
- Protection
Key string - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- []string
- List of the tags attached to this secret
- Url string
- URL of the MCP service
- accessibility string
- For personal password manager
- delete_
protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- input_
rules list(string) - Agentic input rule in name=...,rule=... format
- keep_
prev_ stringversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- max_
versions string - Set the maximum number of versions, limited by the account settings defaults
- mcp_
secret_ stringoauth_ client_ credentials_ id - The ID of this resource.
- name string
- Secret name
- oauth_
client_ stringid - OAuth client ID
- oauth_
client_ stringsecret - OAuth client secret
- oauth_
scopes list(string) - OAuth scopes
- oauth_
token_ stringurl - OAuth token URL
- output_
rules list(string) - Agentic output rule in name=...,rule=... format
- protection_
key string - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- list(string)
- List of the tags attached to this secret
- url string
- URL of the MCP service
- accessibility String
- For personal password manager
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- input
Rules List<String> - Agentic input rule in name=...,rule=... format
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults
- mcp
Secret StringOauth Client Credentials Id - The ID of this resource.
- name String
- Secret name
- oauth
Client StringId - OAuth client ID
- oauth
Client StringSecret - OAuth client secret
- oauth
Scopes List<String> - OAuth scopes
- oauth
Token StringUrl - OAuth token URL
- output
Rules List<String> - Agentic output rule in name=...,rule=... format
- protection
Key String - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- List<String>
- List of the tags attached to this secret
- url String
- URL of the MCP service
- accessibility string
- For personal password manager
- delete
Protection string - Protection from accidental deletion of this object [true/false]
- description string
- Description of the object
- input
Rules string[] - Agentic input rule in name=...,rule=... format
- keep
Prev stringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- max
Versions string - Set the maximum number of versions, limited by the account settings defaults
- mcp
Secret stringOauth Client Credentials Id - The ID of this resource.
- name string
- Secret name
- oauth
Client stringId - OAuth client ID
- oauth
Client stringSecret - OAuth client secret
- oauth
Scopes string[] - OAuth scopes
- oauth
Token stringUrl - OAuth token URL
- output
Rules string[] - Agentic output rule in name=...,rule=... format
- protection
Key string - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- string[]
- List of the tags attached to this secret
- url string
- URL of the MCP service
- accessibility str
- For personal password manager
- delete_
protection str - Protection from accidental deletion of this object [true/false]
- description str
- Description of the object
- input_
rules Sequence[str] - Agentic input rule in name=...,rule=... format
- keep_
prev_ strversion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- max_
versions str - Set the maximum number of versions, limited by the account settings defaults
- mcp_
secret_ stroauth_ client_ credentials_ id - The ID of this resource.
- name str
- Secret name
- oauth_
client_ strid - OAuth client ID
- oauth_
client_ strsecret - OAuth client secret
- oauth_
scopes Sequence[str] - OAuth scopes
- oauth_
token_ strurl - OAuth token URL
- output_
rules Sequence[str] - Agentic output rule in name=...,rule=... format
- protection_
key str - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- Sequence[str]
- List of the tags attached to this secret
- url str
- URL of the MCP service
- accessibility String
- For personal password manager
- delete
Protection String - Protection from accidental deletion of this object [true/false]
- description String
- Description of the object
- input
Rules List<String> - Agentic input rule in name=...,rule=... format
- keep
Prev StringVersion - Whether to keep previous version [true/false]. If not set, use default according to account settings
- max
Versions String - Set the maximum number of versions, limited by the account settings defaults
- mcp
Secret StringOauth Client Credentials Id - The ID of this resource.
- name String
- Secret name
- oauth
Client StringId - OAuth client ID
- oauth
Client StringSecret - OAuth client secret
- oauth
Scopes List<String> - OAuth scopes
- oauth
Token StringUrl - OAuth token URL
- output
Rules List<String> - Agentic output rule in name=...,rule=... format
- protection
Key String - The name of a key that is used to encrypt the secret value (if empty, the account default protectionKey key will be used)
- List<String>
- List of the tags attached to this secret
- url String
- URL of the MCP service
Package Details
- Repository
- akeyless akeyless-community/terraform-provider-akeyless
- License
- Notes
- This Pulumi package is based on the
akeylessTerraform Provider.
published on Monday, Aug 10, 2026 by akeyless-community