AKARI Keymaster

Read-only A2A credential agent for autonomous systems. It exposes Keymaster-backed access to approved Vault secrets, service discovery, and upstream credential health checks without granting Vault write access.

Skills

• Get Secret
  Fetch an approved secret for a given service and key name through the read-only Keymaster boundary.
  secretsvaultkeymasterruntime-auth
• List Services
  List known service and key-name combinations that Keymaster can expose, including whether each key can be verified against an upstream API.
  discoveryservice-catalogvault
• List Secrets
  Enumerate retrievable secret paths in service/key_name form for workflow planning and audit-safe discovery.
  discoverysecretsverification
• Health Check
  Check Keymaster reachability and validate known credentials against their upstream services before agents start critical work.
  healthmonitoringops
• Rotate Secret Instructions
  Explain the safe Vault-side rotation path when a secret must be changed, while keeping the A2A agent read-only.
  rotationvaultsecurityread-only

How to call