DEVELOPER · DEVELOPER
Projects, configs, and secrets reached with that person’s own token.
Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.
Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.
Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
doppler_delete_v3_configs_configWRITEPermanently delete the config. via DELETE /v3/configs/config
doppler_delete_v3_configs_config_dynamic_secrets_dynamic_secret_leases_leaseWRITERevoke Lease via DELETE /v3/configs/config/dynamic_secrets/dynamic_secret/leases/lease
doppler_delete_v3_configs_config_secretWRITESecret via DELETE /v3/configs/config/secret
doppler_delete_v3_configs_config_syncs_syncWRITEDelete an existing sync. via DELETE /v3/configs/config/syncs/sync
doppler_delete_v3_configs_config_tokens_tokenWRITEService Token via DELETE /v3/configs/config/tokens/token
doppler_delete_v3_configs_config_trusted_ipsWRITEDelete via DELETE /v3/configs/config/trusted_ips
doppler_delete_v3_environments_environmentWRITEEnvironment via DELETE /v3/environments/environment
doppler_delete_v3_integrations_integrationWRITEDelete an existing integration. via DELETE /v3/integrations/integration
doppler_delete_v3_projects_projectWRITEProject via DELETE /v3/projects/project
doppler_delete_v3_projects_project_members_member_by_type_by_slugWRITEDelete via DELETE /v3/projects/project/members/member/{type}/{slug}
doppler_delete_v3_projects_roles_role_by_roleWRITEDelete via DELETE /v3/projects/roles/role/{role}
doppler_delete_v3_webhooks_webhook_by_slugWRITEWebhook via DELETE /v3/webhooks/webhook/{slug}
doppler_delete_v3_workplace_change_request_policies_change_request_policy_by_slugWRITEDelete an existing change request policy via DELETE /v3/workplace/change_request_policies/change_request_policy/{slug}
doppler_delete_v3_workplace_change_requests_change_request_by_change_request_id_units_unit_by_unit_id_reviewWRITEChange requests units review delete via DELETE /v3/workplace/change_requests/change_request/{change_request_id}/units/unit/{unit_id}/review
doppler_delete_v3_workplace_groups_group_by_slugWRITEDelete via DELETE /v3/workplace/groups/group/{slug}
doppler_delete_v3_workplace_groups_group_by_slug_members_by_type_by_member_slugWRITEDelete Member via DELETE /v3/workplace/groups/group/{slug}/members/{type}/{member_slug}
doppler_delete_v3_workplace_integrations_integration_members_by_type_by_slugWRITEDelete via DELETE /v3/workplace/integrations/integration/members/{type}/{slug}
doppler_delete_v3_workplace_roles_role_by_roleWRITEDelete via DELETE /v3/workplace/roles/role/{role}
doppler_delete_v3_workplace_service_accounts_service_account_by_service_account_identities_identity_by_identityWRITEService account identities delete via DELETE /v3/workplace/service_accounts/service_account/{service_account}/identities/identity/{identity}
doppler_delete_v3_workplace_service_accounts_service_account_by_service_account_tokens_token_by_api_tokenWRITERevoke an existing service account API token. via DELETE /v3/workplace/service_accounts/service_account/{service_account}/tokens/token/{api_token}
doppler_delete_v3_workplace_service_accounts_service_account_by_slugWRITEDelete via DELETE /v3/workplace/service_accounts/service_account/{slug}
doppler_get_v3_configsREADFetch all configs. via GET /v3/configs
doppler_get_v3_configs_configREADFetch a config's details. via GET /v3/configs/config
doppler_get_v3_configs_config_logsREADConfig Logs via GET /v3/configs/config/logs
doppler_get_v3_configs_config_logs_logREADConfig Log via GET /v3/configs/config/logs/log
doppler_get_v3_configs_config_secretREADSecret via GET /v3/configs/config/secret
doppler_get_v3_configs_config_secretsREADSecrets via GET /v3/configs/config/secrets
doppler_get_v3_configs_config_secrets_downloadREADDownload Secrets via GET /v3/configs/config/secrets/download
doppler_get_v3_configs_config_secrets_namesREADSecret Names via GET /v3/configs/config/secrets/names
doppler_get_v3_configs_config_syncs_syncREADRetrieve an existing secrets sync. via GET /v3/configs/config/syncs/sync
doppler_get_v3_configs_config_tokensREADService Tokens via GET /v3/configs/config/tokens
doppler_get_v3_configs_config_trusted_ipsREADList via GET /v3/configs/config/trusted_ips
doppler_get_v3_environmentsREADEnvironments via GET /v3/environments
doppler_get_v3_environments_environmentREADEnvironment via GET /v3/environments/environment
doppler_get_v3_integrationsREADList all existing integrations via GET /v3/integrations
doppler_get_v3_integrations_integrationREADRetrieve an existing integration via GET /v3/integrations/integration
doppler_get_v3_integrations_integration_membersREADList via GET /v3/integrations/integration/members
doppler_get_v3_integrations_integration_optionsREADGet Options via GET /v3/integrations/integration/options
doppler_get_v3_logsREADActivity Logs via GET /v3/logs
doppler_get_v3_logs_logREADActivity Log via GET /v3/logs/log
doppler_get_v3_meREADGet information about a token via GET /v3/me
doppler_get_v3_projectsREADProjects via GET /v3/projects
doppler_get_v3_projects_permissionsREADList Permissions via GET /v3/projects/permissions
doppler_get_v3_projects_projectREADProject via GET /v3/projects/project
doppler_get_v3_projects_project_membersREADList via GET /v3/projects/project/members
doppler_get_v3_projects_project_members_member_by_type_by_slugREADRetrieve via GET /v3/projects/project/members/member/{type}/{slug}
doppler_get_v3_projects_rolesREADList via GET /v3/projects/roles
doppler_get_v3_projects_roles_role_by_roleREADRetrieve via GET /v3/projects/roles/role/{role}
doppler_get_v3_webhooksREADWebhooks via GET /v3/webhooks
doppler_get_v3_webhooks_webhook_by_slugREADWebhook via GET /v3/webhooks/webhook/{slug}
doppler_get_v3_workplaceREADRetrieve via GET /v3/workplace
doppler_get_v3_workplace_change_request_policiesREADList existing change request policies via GET /v3/workplace/change_request_policies
doppler_get_v3_workplace_change_request_policies_change_request_policy_by_slugREADFetch an existing change request policy via GET /v3/workplace/change_request_policies/change_request_policy/{slug}
doppler_get_v3_workplace_change_requestsREADChange requests list via GET /v3/workplace/change_requests
doppler_get_v3_workplace_change_requests_change_request_by_change_request_idREADChange requests get via GET /v3/workplace/change_requests/change_request/{change_request_id}
doppler_get_v3_workplace_change_requests_change_request_by_change_request_id_units_unit_by_unit_idREADChange requests units get via GET /v3/workplace/change_requests/change_request/{change_request_id}/units/unit/{unit_id}
doppler_get_v3_workplace_groupsREADList via GET /v3/workplace/groups
doppler_get_v3_workplace_groups_group_by_group_slug_members_by_member_type_by_member_slugREADRetrieve Member via GET /v3/workplace/groups/group/{group_slug}/members/{member_type}/{member_slug}
doppler_get_v3_workplace_groups_group_by_slugREADRetrieve via GET /v3/workplace/groups/group/{slug}
doppler_get_v3_workplace_integrations_integration_members_by_type_by_slugREADRetrieve via GET /v3/workplace/integrations/integration/members/{type}/{slug}
doppler_get_v3_workplace_integrations_integration_members_member_by_type_by_slugREADWorkplace integration members get via GET /v3/workplace/integrations/integration/members/member/{type}/{slug}
doppler_get_v3_workplace_invitesREADList via GET /v3/workplace/invites
doppler_get_v3_workplace_permissionsREADList Permissions via GET /v3/workplace/permissions
doppler_get_v3_workplace_rolesREADList via GET /v3/workplace/roles
doppler_get_v3_workplace_roles_role_by_roleREADRetrieve via GET /v3/workplace/roles/role/{role}
doppler_get_v3_workplace_service_accountsREADList via GET /v3/workplace/service_accounts
doppler_get_v3_workplace_service_accounts_service_account_by_service_account_identitiesREADService account identities list via GET /v3/workplace/service_accounts/service_account/{service_account}/identities
doppler_get_v3_workplace_service_accounts_service_account_by_service_account_identities_identity_by_identityREADService account identities get via GET /v3/workplace/service_accounts/service_account/{service_account}/identities/identity/{identity}
doppler_get_v3_workplace_service_accounts_service_account_by_service_account_tokensREADList information about existing service account API tokens. via GET /v3/workplace/service_accounts/service_account/{service_account}/tokens
doppler_get_v3_workplace_service_accounts_service_account_by_service_account_tokens_token_by_api_tokenREADRetrieve information about a single service account API token. via GET /v3/workplace/service_accounts/service_account/{service_account}/tokens/token/{api_token}
doppler_get_v3_workplace_service_accounts_service_account_by_slugREADRetrieve via GET /v3/workplace/service_accounts/service_account/{slug}
doppler_get_v3_workplace_usersREADGet all users within a workplace via GET /v3/workplace/users
doppler_get_v3_workplace_users_by_slugREADGet a specific user in a workplace via GET /v3/workplace/users/{slug}
doppler_get_v3_workplace_users_by_workplace_user_idREADGet a specific user in a workplace via GET /v3/workplace/users/{workplace_user_id}
doppler_patch_v3_integrations_integration_members_by_type_by_slugWRITEUpdate via PATCH /v3/integrations/integration/members/{type}/{slug}
doppler_patch_v3_projects_project_members_member_by_type_by_slugWRITEUpdate via PATCH /v3/projects/project/members/member/{type}/{slug}
doppler_patch_v3_projects_roles_role_by_roleWRITEUpdate via PATCH /v3/projects/roles/role/{role}
doppler_patch_v3_webhooks_webhook_by_slugWRITEWebhook via PATCH /v3/webhooks/webhook/{slug}
doppler_patch_v3_workplace_groups_group_by_slugWRITEUpdate via PATCH /v3/workplace/groups/group/{slug}
doppler_patch_v3_workplace_roles_role_by_roleWRITEUpdate via PATCH /v3/workplace/roles/role/{role}
doppler_patch_v3_workplace_service_accounts_service_account_by_slugWRITEUpdate via PATCH /v3/workplace/service_accounts/service_account/{slug}
doppler_patch_v3_workplace_users_by_slugWRITEUpdate a specific user for a workplace via PATCH /v3/workplace/users/{slug}
doppler_post_v3_configsWRITECreate a new branch config. via POST /v3/configs
doppler_post_v3_configs_configWRITEModify an existing config. via POST /v3/configs/config
doppler_post_v3_configs_config_cloneWRITECreate a new branch config by cloning another. This duplicates a branch config and all its secrets. via POST /v3/configs/config/clone
doppler_post_v3_configs_config_dynamic_secrets_dynamic_secret_leasesWRITEIssue a lease for a dynamic secret via POST /v3/configs/config/dynamic_secrets/dynamic_secret/leases
doppler_post_v3_configs_config_inheritableWRITEUpdate the inheritability of a config. via POST /v3/configs/config/inheritable
doppler_post_v3_configs_config_inheritsWRITEInherits via POST /v3/configs/config/inherits
doppler_post_v3_configs_config_lockWRITEPrevent the config from being renamed or deleted. via POST /v3/configs/config/lock
doppler_post_v3_configs_config_logs_log_rollbackWRITEConfig Log via POST /v3/configs/config/logs/log/rollback
doppler_post_v3_configs_config_secretsWRITESecrets via POST /v3/configs/config/secrets
doppler_post_v3_configs_config_syncsWRITECreate a new secrets sync. via POST /v3/configs/config/syncs
doppler_post_v3_configs_config_tokensWRITEService Token via POST /v3/configs/config/tokens
doppler_post_v3_configs_config_trusted_ipsWRITEAdd via POST /v3/configs/config/trusted_ips
doppler_post_v3_configs_config_unlockWRITEAllow the config to be renamed and/or deleted. via POST /v3/configs/config/unlock
doppler_post_v3_environmentsWRITEEnvironment via POST /v3/environments
doppler_post_v3_integrationsWRITECreate a new external integration. via POST /v3/integrations
doppler_post_v3_integrations_integration_membersWRITEAdd via POST /v3/integrations/integration/members
doppler_post_v3_projectsWRITEProject via POST /v3/projects
doppler_post_v3_projects_projectWRITEProject via POST /v3/projects/project
doppler_post_v3_projects_project_membersWRITEAdd via POST /v3/projects/project/members
doppler_post_v3_projects_project_noteWRITESet a note on a secret via POST /v3/projects/project/note
doppler_post_v3_projects_rolesWRITECreate via POST /v3/projects/roles
doppler_post_v3_webhooksWRITEWebhook via POST /v3/webhooks
doppler_post_v3_webhooks_webhook_by_slug_disableWRITEWebhook via POST /v3/webhooks/webhook/{slug}/disable
doppler_post_v3_webhooks_webhook_by_slug_enableWRITEWebhook via POST /v3/webhooks/webhook/{slug}/enable
doppler_post_v3_workplaceWRITEUpdate via POST /v3/workplace
doppler_post_v3_workplace_change_request_policiesWRITECreate a new change request policy via POST /v3/workplace/change_request_policies
doppler_post_v3_workplace_change_request_policies_change_request_policy_by_slugWRITEUpdate an existing change request policy via POST /v3/workplace/change_request_policies/change_request_policy/{slug}
doppler_post_v3_workplace_change_requestsWRITEChange requests create via POST /v3/workplace/change_requests
doppler_post_v3_workplace_change_requests_change_request_by_change_request_idWRITEChange requests update via POST /v3/workplace/change_requests/change_request/{change_request_id}
doppler_post_v3_workplace_change_requests_change_request_by_change_request_id_closeWRITEChange requests close via POST /v3/workplace/change_requests/change_request/{change_request_id}/close
doppler_post_v3_workplace_change_requests_change_request_by_change_request_id_units_unit_by_unit_id_applyWRITEChange requests units apply via POST /v3/workplace/change_requests/change_request/{change_request_id}/units/unit/{unit_id}/apply
doppler_post_v3_workplace_change_requests_change_request_by_change_request_id_units_unit_by_unit_id_reviewWRITEChange requests units review create via POST /v3/workplace/change_requests/change_request/{change_request_id}/units/unit/{unit_id}/review
doppler_post_v3_workplace_groupsWRITECreate via POST /v3/workplace/groups
doppler_post_v3_workplace_groups_group_by_slug_membersWRITEAdd Member via POST /v3/workplace/groups/group/{slug}/members
doppler_post_v3_workplace_rolesWRITECreate via POST /v3/workplace/roles
doppler_post_v3_workplace_service_accountsWRITECreate via POST /v3/workplace/service_accounts
doppler_post_v3_workplace_service_accounts_service_account_by_service_account_identitiesWRITEService account identities create via POST /v3/workplace/service_accounts/service_account/{service_account}/identities
doppler_post_v3_workplace_service_accounts_service_account_by_service_account_tokensWRITEGenerate a new service account API token. via POST /v3/workplace/service_accounts/service_account/{service_account}/tokens
doppler_put_v3_environments_environmentWRITEEnvironment via PUT /v3/environments/environment
doppler_put_v3_integrations_integrationWRITEUpdate an existing integration. via PUT /v3/integrations/integration
doppler_put_v3_workplace_change_requests_change_request_by_change_request_id_assigneesWRITEChange requests assignees update via PUT /v3/workplace/change_requests/change_request/{change_request_id}/assignees
doppler_put_v3_workplace_change_requests_change_request_by_change_request_id_units_unit_by_unit_id_statusWRITEChange requests units status update via PUT /v3/workplace/change_requests/change_request/{change_request_id}/units/unit/{unit_id}/status
doppler_put_v3_workplace_service_accounts_service_account_by_service_account_identities_identity_by_identityWRITEService account identities update via PUT /v3/workplace/service_accounts/service_account/{service_account}/identities/identity/{identity}
Put Doppler behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.