opschain admin secrets providers show

Included from Basic tier

Shows one secrets provider by its code or row id: connection facts (kind, KV version, address, auth method and its non-secret halves), whether a credential is stored (the value itself is write-only and never echoed), connection options (mount path, TLS posture, cipher stacking), the enabled flag, the resolution locus, the rate budget (each lane's figure, unlimited where the record says -1, or the estate default where the record leaves it 0) and the last test outcome.

opschain admin secrets providers show vault
Code:            vault
Id:              019a0d7e-10c2-7f7a-8b53-3b1c9a4f2e01
Display name:    Secrets vault
Kind:            openbao (KV v1)
Address:         https://bao.corp:8200
Auth method:     token
Username:        -
Role id:         -
Credential:      stored (write-only)
Mount path:      secrets
SSL verify:      yes
SSL CA cert:     -
Cipher stacking: yes
Enabled:         yes
Resolution:      server
Rate limit:      50 reads/s, estate default (secrets.default_rate_limit) token mints/min
Last test:       2026-10-23T05:41:02Z ok

-o, --output json|yaml emits the same document the list verb's rows carry.

Flags

Flag	Meaning
--server <url>	Server base URL (default: the active context / OPSCHAIN_SERVER).
--auth-token <token>	Admin bearer token override (default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login).

See also

• opschain docs cli/admin-secrets-providers-test — refresh the health line.