Akeyless Secrets Manager (Preview)

Akeyless connector for api.akeyless.io: list and describe vault items, read secret values, and administer roles, gateways, targets, and authentication methods. Supports optional writes to create or update secrets and move objects per your account RBAC. Connection uses HTTP Basic with Akeyless API Key Access ID and Access Key. See readme.md for credential setup and API references.

This connector is available in the following products and regions:

Service Class Regions
Copilot Studio Premium All Power Automate regions except the following:
     -   US Government (GCC)
     -   US Government (GCC High)
     -   China Cloud operated by 21Vianet
     -   US Department of Defense (DoD)
Logic Apps Standard All Logic Apps regions except the following:
     -   Azure Government regions
     -   Azure China regions
     -   US Department of Defense (DoD)
Power Apps Premium All Power Apps regions except the following:
     -   US Government (GCC)
     -   US Government (GCC High)
     -   China Cloud operated by 21Vianet
     -   US Department of Defense (DoD)
Power Automate Premium All Power Automate regions except the following:
     -   US Government (GCC)
     -   US Government (GCC High)
     -   China Cloud operated by 21Vianet
     -   US Department of Defense (DoD)
Contact
Name Akeyless
URL https://www.akeyless.io/
Email simon.f@akeyless.io
Connector Metadata
Publisher Akeyless
Website https://www.akeyless.io/
Privacy policy https://www.akeyless.io/privacy-policy
Categories Security;IT Operations
Support https://www.akeyless.io/support/

Akeyless Secrets Manager

Akeyless is a secrets management platform. This connector calls the Akeyless REST API at api.akeyless.io so makers can list vault items, read secret values, inspect roles and infrastructure, and optionally create, update, delete, or move items according to the API Key role.

Publisher

Akeyless

Prerequisites

  • An Akeyless account.
  • An API Key authentication method (Access ID and Access Key). Create one in the Akeyless Console under Administration → Users & Auth Methods → API Key. The Access Key is shown once; store it securely. See Authenticate with API Key.
  • An Access Role that grants only the capabilities each flow needs (RBAC).

Connection

The connection uses HTTP Basic authentication:

  • Akeyless Access ID (protocol username)
  • Akeyless Access Key (protocol password)

Do not enter a Microsoft account email or console password. Credentials are sent to Akeyless /auth with access-type access_key. Action bodies do not accept Access ID or Access Key.

Supported operations

Primary actions (important):

  • List Items — folders and item metadata under a path
  • Describe Item — metadata for one item path
  • Get Secret — returns a SecretValue field
  • Get Password — returns username and password fields when the secret is stored as credentials

Advanced actions include listing auth methods, roles, gateways, targets, groups, USC secrets, tags, analytics, and write operations (Create Secret, Update Item, Delete Item, Move Objects). Restrict the API Key role before using writes.

Known issues and limitations

  • Secret values returned by Get Secret and Get Password appear in flow run outputs. Limit who can view those flows.
  • Write operations change data in Akeyless. Test in a sandbox first.
  • Brand color is #0E4D45.

Support

Creating a connection

The connector supports the following authentication types:
Default Parameters for creating connection. All regions Not shareable

Default

Applicable: All regions

Parameters for creating connection.

This is not shareable connection. If the power app is shared with another user, another user will be prompted to create new connection explicitly.

Name Type Description Required
Akeyless Access ID securestring Your Akeyless Access ID (API Key auth). This value is sent as the HTTP Basic auth username — it is not a Microsoft username. True
Akeyless Access Key securestring Your Akeyless Access Key (secret). This value is sent as the HTTP Basic auth password — it is not your Microsoft password. True

Actions

Create Secret

Write: creates a static secret. See create-secret.
Delete Item

Write: deletes or schedules deletion. See delete-item.
Describe Item

Returns metadata for an item by path or id. See describe-item.
Get Analytics Data

Returns analytics / usage data. See get-analytics-data.
Get Auth Method

Returns one authentication method by name. See get-auth-method.
Get Password

Retrieves a structured username/password style secret. Same connection; supply only the secret path.
Get Role

Returns one role by name. See get-role.
Get Secret

Retrieves a secret value. Use the connection for Access Id / Access Key; supply only the secret path.
Get Tags

Returns tags for an item path. See get-tags.
List Auth Methods

Lists authentication methods. See list-auth-methods. Optional type is an array of method types (for example api_key, ldap).
List Gateways

Lists gateways. See list-gateways.
List Groups

Lists groups. See list-groups.
List Items

Lists folders and items under a vault path. See list-items.
List Roles

Lists roles. See list-roles.
List Targets

Lists integration targets. See list-targets.
Move Objects

Write: moves or renames items, auth methods, or roles. See move-objects.
Target Get

Returns one target by name. See target-get.
Update Item

Write: updates item metadata and/or static secret value (uses /update-item and/or /update-secret-val like MCP). See update-item and update-secret-val.
USC List

Lists secrets for a Universal Secrets Connector. See usc-list.

Create Secret

Operation ID:
CreateSecret

Write: creates a static secret. See create-secret.

Parameters

Name Key Required Type Description
Name
 name True string

Full path of the new secret.
Value
 value True string

Secret material.
Description
 description string

Description.
Tags
 tags array of string

Tags.
Protection Key
 protection_key string

Protection Key.
Multiline
 multiline boolean

Multiline.
Secret Type
 secret_type string

Secret Type.
Format
 format string

Format.
Max Versions
 max_versions string

Max Versions.
Delete Protection
 delete_protection boolean

Delete Protection.

Returns

response
object

Delete Item

Operation ID:
DeleteItem

Write: deletes or schedules deletion. See delete-item.

Parameters

Name Key Required Type Description
Name
 name True string

Name.
Delete Immediately
 delete_immediately boolean

Delete Immediately.
Delete In Days
 delete_in_days integer

Delete In Days.
Version
 version integer

Version.

Returns

response
object

Describe Item

Operation ID:
DescribeItem

Returns metadata for an item by path or id. See describe-item.

Parameters

Name Key Required Type Description
Item path
 name True string

Full path (item name) in Akeyless, for example /Prod/DB/creds.
Show versions
 show_versions boolean

Include item versions in the reply (Akeyless show-versions).

Returns

Describe-item response JSON from Akeyless.

response
object

Get Analytics Data

Operation ID:
GetAnalyticsData

Returns analytics / usage data. See get-analytics-data.

Returns

response
object

Get Auth Method

Operation ID:
GetAuthMethod

Returns one authentication method by name. See get-auth-method.

Parameters

Name Key Required Type Description
Name
 name True string

Exact auth method name.

Returns

response
object

Get Password

Operation ID:
GetPassword

Retrieves a structured username/password style secret. Same connection; supply only the secret path.

Parameters

Name Key Required Type Description
Secret name
 secret_name True string

Full path of the secret in Akeyless.

Returns

Name Path Type Description
Username
 username string

Username when the secret is stored as credentials.
Password
 password string

Password when the secret is stored as credentials.

Get Role

Operation ID:
GetRole

Returns one role by name. See get-role.

Parameters

Name Key Required Type Description
Name
 name True string

Exact role name.

Returns

response
object

Get Secret

Operation ID:
GetSecret

Retrieves a secret value. Use the connection for Access Id / Access Key; supply only the secret path.

Parameters

Name Key Required Type Description
Secret name
 secret_name True string

Full path of the secret in Akeyless (for example /Prod/DB/Password).

Returns

Name Path Type Description
Secret value
 SecretValue string

Plain-text secret value.

Get Tags

Operation ID:
GetTags

Returns tags for an item path. See get-tags.

Parameters

Name Key Required Type Description
Name
 name True string

Full item path.

Returns

response
object

List Auth Methods

Operation ID:
ListAuthMethods

Lists authentication methods. See list-auth-methods. Optional type is an array of method types (for example api_key, ldap).

Parameters

Name Key Required Type Description
Filter
 filter string

Substring filter on auth method name.
Pagination Token
 pagination_token string

Maps to Akeyless pagination-token.
Type
 type array of string

Restrict to these auth method types; omit for all.

Returns

response
object

List Gateways

Operation ID:
ListGateways

Lists gateways. See list-gateways.

Returns

response
object

List Groups

Operation ID:
ListGroups

Lists groups. See list-groups.

Parameters

Name Key Required Type Description
Filter
 filter string

Substring filter on group name.
Pagination Token
 pagination_token string

Maps to Akeyless pagination-token.

Returns

response
object

List Items

Operation ID:
ListItems

Lists folders and items under a vault path. See list-items.

Parameters

Name Key Required Type Description
Folder path
 path string

Folder path to list (for example / or /Production). Leave empty for root.
Name filter
 filter string

Filter by item name or substring.
Pagination token
 pagination_token string

Pagination token from a previous response.
Current folder only
 current_folder boolean

If true, list only direct children of the folder.

Returns

Name Path Type Description
items
 items array of object

Items under the requested path.
item_name
 items.item_name string

Item path.
item_type
 items.item_type string

Akeyless item type.
display_id
 items.display_id string

Display id.
next_page
 next_page string

Token for the next page of results.
has_next
 has_next boolean

True when another page is available.

List Roles

Operation ID:
ListRoles

Lists roles. See list-roles.

Parameters

Name Key Required Type Description
Filter
 filter string

Filter.
Pagination Token
 pagination_token string

Maps to Akeyless pagination-token.

Returns

response
object

List Targets

Operation ID:
ListTargets

Lists integration targets. See list-targets.

Parameters

Name Key Required Type Description
Filter
 filter string

Filter.
Pagination Token
 pagination_token string

Pagination Token.
Type
 type array of string

Target types to include; omit for all.

Returns

response
object

Move Objects

Operation ID:
MoveObjects

Write: moves or renames items, auth methods, or roles. See move-objects.

Parameters

Name Key Required Type Description
Source Path
 source_path True string

Source Path.
Target Path
 target_path True string

Target Path.
Objects Type
 objects_type string

Objects Type.

Returns

response
object

Target Get

Operation ID:
TargetGet

Returns one target by name. See target-get.

Parameters

Name Key Required Type Description
Name
 name True string

Exact target name.
Show Versions
 show_versions boolean

Include all target versions (show-versions).

Returns

response
object

Update Item

Operation ID:
UpdateItem

Write: updates item metadata and/or static secret value (uses /update-item and/or /update-secret-val like MCP). See update-item and update-secret-val.

Parameters

Name Key Required Type Description
Name
 name True string

Current item path.
New Value
 new_value string

New secret value for static secrets.
Keep Prev Version
 keep_prev_version boolean

Keep Prev Version.
Description
 description string

Description.
New Name
 new_name string

New Name.
Add Tags
 add_tags array of string

Add Tags.
Remove Tags
 remove_tags array of string

Remove Tags.
Max Versions
 max_versions string

Max Versions.
Delete Protection
 delete_protection boolean

Delete Protection.

Returns

response
object

USC List

Operation ID:
UscList

Lists secrets for a Universal Secrets Connector. See usc-list.

Parameters

Name Key Required Type Description
Usc Name
 usc_name True string

Universal Secrets Connector item name in Akeyless (sent as usc-name).

Returns

response
object

Definitions

object

This is the type 'object'.