A technology is described for resolving command parameter that are included in command invocations. An example method may include receiving a request to invoke a command that includes a command parameter. The command may be executed by a software agent hosted on a computing resource managed within a service provider environment. In response to the request, a parameter value for the command parameter may be obtained from a parameter data store using a parameter ID. A command message having command instructions to execute the command the parameter value may be generated and the command message may be encrypted using a cryptographic key associated with the software agent. The command message may then be sent to the software agent, enabling the software agent to decrypt the command message and execute the command.