diff --git a/extensions/matrix/src/runtime-api.test.ts b/extensions/matrix/src/runtime-api.test.ts
index a3768fbaf4b..97b6ffcbda4 100644
--- a/extensions/matrix/src/runtime-api.test.ts
+++ b/extensions/matrix/src/runtime-api.test.ts
@@ -10,6 +10,10 @@ describe("matrix runtime-api", () => {
     expect(typeof helpers.resolveDefaultAccountId).toBe("function");
   });
 
+  it("re-exports buildSecretInputSchema for config schema helpers", () => {
+    expect(typeof runtimeApi.buildSecretInputSchema).toBe("function");
+  });
+
   it("does not re-export setup entrypoints that create extension cycles", () => {
     expect("matrixSetupWizard" in runtimeApi).toBe(false);
     expect("matrixSetupAdapter" in runtimeApi).toBe(false);
diff --git a/package.json b/package.json
index 5b9c9866ba9..6da833831a9 100644
--- a/package.json
+++ b/package.json
@@ -482,6 +482,10 @@
       "types": "./dist/plugin-sdk/tool-send.d.ts",
       "default": "./dist/plugin-sdk/tool-send.js"
     },
+    "./plugin-sdk/secret-input-schema": {
+      "types": "./dist/plugin-sdk/secret-input-schema.d.ts",
+      "default": "./dist/plugin-sdk/secret-input-schema.js"
+    },
     "./cli-entry": "./openclaw.mjs"
   },
   "scripts": {
diff --git a/scripts/lib/plugin-sdk-entrypoints.json b/scripts/lib/plugin-sdk-entrypoints.json
index 55c22bf8470..108199d7772 100644
--- a/scripts/lib/plugin-sdk-entrypoints.json
+++ b/scripts/lib/plugin-sdk-entrypoints.json
@@ -109,5 +109,6 @@
   "web-media",
   "speech",
   "state-paths",
-  "tool-send"
+  "tool-send",
+  "secret-input-schema"
 ]