gcp-vertexai-cached-tool-credentials-input

Cached tool definitions can directly embed search API keys, external API keys, OAuth access tokens, or OIDC ID tokens.

gcpcritical service: gcp:vertexai emits ContainsCredential

Where it sits

locationaiplatform.projects.locations.cachedContents.create.request.tools[].{exaAiSearch.apiKey,parallelAiSearch.apiKey,retrieval.externalApi.apiAuth.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.oauthConfig.accessToken,retrieval.externalApi.authConfig.oidcConfig.idToken}
location kindsecret_value
data kindsapi_key oauth_token bearer_token credential
emits edgeContainsCredential
serviceVertex AI / Workbench (gcp:vertexai)

Collection recipe

access modewrite_only_input
operationaiplatform.projects.locations.cachedContents.create
response pathrequest.tools[].{exaAiSearch.apiKey,parallelAiSearch.apiKey,retrieval.externalApi.apiAuth.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.apiKeyConfig.apiKeyString,retrieval.externalApi.authConfig.oauthConfig.accessToken,retrieval.externalApi.authConfig.oidcConfig.idToken}
encodingjson
params{"name": "\u003cresource-name\u003e"}

Required permissions

aiplatform.cachedContents.create

References

move · open · esc close