Connect Doppler to AI agents

Connect Doppler to Claude, Codex, Cursor, or other AI agents for your entire team. Metorial security, governance, observability, and gives your team a unified Magic MCP url to connect.

Supported Tools

manage_configs

Manage Configs

List, create, update, delete, clone, lock, or unlock configs within a Doppler project. Configs hold the actual secret values for an environment. Supports branch configs, cloning, and locking to prevent modifications.

download_secrets

Download Secrets

Download all computed secret values from a Doppler project config as a flat key-value map. Optionally include dynamic secrets with configurable TTL. Useful for exporting secrets for local development, CI/CD pipelines, or deployment scripts.

activity_logs

Activity Logs

View workplace-wide activity logs to audit what happened in your Doppler workplace. Shows who performed what actions, when, and on which resources.

get_workplace

Get Workplace

Retrieve details about the current Doppler workplace, including its name and contact emails. Useful for verifying which workplace your token is connected to.

manage_environments

Manage Environments

List, create, rename, or delete environments within a Doppler project. Environments represent stages like development, staging, and production. Each environment contains one or more configs that hold secret values.

share_secret

Share Secret

Generate a temporary, shareable Doppler Share link for a secret value. The secret is sent in plain text to Doppler but is never stored — a one-time-use or limited-view URL is returned for secure sharing.

manage_projects

Manage Projects

List, create, retrieve, update, or delete Doppler projects. Projects are the top-level organizational unit that contain environments and configs for managing secrets.

manage_secrets

Manage Secrets

Retrieve, set, update, or delete secrets within a Doppler project config. Use this to read one or more secret values, bulk-set secrets as key-value pairs, or remove individual secrets. Secrets are environment variables stored in a specific config within a project.

manage_webhooks

Manage Webhooks

List, create, update, enable, disable, or delete webhooks for a Doppler project. Webhooks send POST requests to a URL when secrets change in specified configs, enabling automated deployments and CI/CD triggers.

manage_trusted_ips

Manage Trusted IPs

List, add, or remove trusted IP ranges for a Doppler config. Trusted IPs restrict which source IPs can access secrets for a given config. IP ranges use CIDR notation (e.g., "192.168.1.0/24"). The default "0.0.0.0/0" allows all traffic.

config_logs

Config Logs & Rollback

View the change history of a config's secrets and optionally roll back to a previous state. Each log entry shows what was modified, when, and by whom. Rollback reverts the config to the state before a specific change.

More integrations teams use with Doppler

GitHub

Manage repositories, issues, and pull requests. Create and configure branches, star repositories, review code, and merge changes. Automate CI/CD workflows with GitHub Actions, manage workflow runs, secrets, and artifacts. Track issues with labels, milestones, and assignees. Search across code, repositories, issues, and users. Manage organizations, teams, and memberships. Create and manage projects, gists, packages, deployments, and environments. Access security alerts including code scanning, secret scanning, and Dependabot alerts. Read and write file contents in repositories. Manage webhooks, notifications, and codespaces.

Sharepoint

Manage SharePoint sites, document libraries, lists, and files. Create, read, update, and delete lists and list items with custom columns. Upload, download, move, copy, and version files in document libraries. Search across sites, files, folders, lists, and list items using Microsoft Search. Manage permissions at site, list, and item levels with granular access control. Define and manage content types and site columns. Subscribe to webhooks for list and library change notifications. Retrieve site properties and search for sites across Microsoft 365.

Salesforce

Manage CRM data including Accounts, Contacts, Leads, Opportunities, Cases, and custom objects. Create, read, update, and delete records. Query data using SOQL and search across objects using SOSL. Perform bulk data operations for large-scale imports, exports, and migrations. Execute composite requests to batch multiple operations in a single API call. Access analytics, reports, and dashboards. Manage files and attachments associated with records. Interact with Chatter feeds, posts, and groups for social collaboration. Subscribe to real-time change events via Change Data Capture and Platform Events. Manage org metadata including custom objects, fields, layouts, and workflows. Query data using GraphQL for precise data retrieval across related objects.

Airtable

Create, read, update, and delete records in Airtable bases and tables. Manage base schemas including creating tables and fields. Filter records using formulas, sort by fields, and scope queries to specific views. Upsert records to find, create, or update in a single call. Upload attachments to records, read and write record comments, list accessible bases, and receive real-time base change events through webhooks.

Bitbucket

Manage Git repositories, pull requests, and CI/CD pipelines on Bitbucket Cloud. Create, fork, and configure repositories within workspaces and projects. Create, review, approve, merge, and decline pull requests with inline code comments. Browse source code, list commits, and manage branches and tags. Track issues with the built-in issue tracker. Trigger, monitor, and manage Bitbucket Pipelines. List workspace members, configure repository default reviewers and branch restrictions, create and manage repository webhooks, and search code across repositories.

Heroku

Deploy, manage, and scale applications on Heroku's cloud platform. Create and configure apps, scale dynos, provision add-ons (databases, caching, etc.), manage configuration variables, build and release code, add custom domains and SSL certificates, manage collaborators and team permissions, configure pipelines for continuous delivery, set up log drains, and sync data with Salesforce via Heroku Connect. Subscribe to webhooks for real-time notifications on app changes, builds, releases, dyno lifecycle events, and more.

Technical notes for Doppler

Manage secrets and environment variables across projects, environments, and configurations. Store, retrieve, update, and delete secrets with support for version history, rollback, and secret references. Organize secrets into projects with environment-specific configs (development, staging, production). Issue and revoke dynamic secret leases for short-lived credentials. Configure automatic secret syncing to third-party services like AWS, GCP, and Vercel. Share secrets securely via expiring links. Manage workplace users, groups, service accounts, and role-based access controls. Set up webhooks to trigger actions when secrets change. Restrict config access via trusted IP whitelisting. Create change request workflows requiring approval before secret modifications. View activity and audit logs for compliance tracking.

Connect Doppler to production AI agents

See how Metorial gives Doppler access the governance, tracing, and security controls teams need.

Frequently asked questions

Common questions about connecting Doppler to AI agents with Metorial.

  1. Can Metorial connect Doppler to AI agents?
    Yes. Metorial connects AI agents to Doppler through a governed integration layer, so teams can use the provider while keeping access controlled and observable.
  2. Metorial is MCP compatible and lets teams expose approved provider tools to MCP-capable agents and clients through a controlled access layer.
  3. Metorial applies policies across users, groups, providers, agents, and individual tools, then records the context around every agent interaction.
  4. Yes. Metorial records provider activity so teams can inspect tool calls, troubleshoot integrations, and give security teams the visibility they need.