Infisical MCP Server

Official Infisical MCP Server

Local serverstdio

What is the Infisical MCP server?

Most browser automation work still happens through a UI a human drives. Infisical MCP server moves it into the conversation instead. Official Infisical MCP Server.

The short version

The Infisical Model Context Protocol server allows you to integrate with Infisical APIs through function calling. This protocol supports various tools to interact with Infisical.

The tools it exposes

The server publishes 11 tools. What each one is for:

  • create-secret — Create a new secret
  • delete-secret — Delete a secret
  • update-secret — Update a secret
  • list-secrets — Lists all secrets
  • get-secret — Get a single secret
  • create-project — Create a new project
  • create-environment — Create a new environment
  • create-folder — Create a new folder
  • invite-members-to-project — Invite one or more members to a project
  • list-projects — List all projects
  • Instructions — 1. Set the environment variables as described in the Environment Variables step. 2. Run the command to start the MCP

What it needs from you

Configuration is passed through the environment: INFISICAL_HOST_URL, INFISICAL_UNIVERSAL_AUTH_CLIENT_ID, INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET, INFISICAL_AUTH_METHOD, INFISICAL_TOKEN. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.

Getting it running

@infisical/mcp on npm is all you need. Most clients run it directly, so configuration is a few lines and a restart.

How it compares

Plenty of browser automation servers cover similar ground. The differences that matter in practice are scope of access and how much setup stands between you and a working tool call. Infisical's toolset — create-secret, delete-secret, update-secret and 8 more — is a fair guide to whether it matches your workflow. It is maintained by Infisical; worth a glance at recent repository activity before you build anything load-bearing on it.

SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.

Things to watch

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • With 11 tools registered it takes up a noticeable share of the context window; turn it off in projects that never touch Infisical.
  • Missing credentials fail quietly in some clients — if no tools show up, check the environment block first.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Available tools

ToolWhat it does
create-secretCreate a new secret
delete-secretDelete a secret
update-secretUpdate a secret
list-secretsLists all secrets
get-secretGet a single secret
create-projectCreate a new project
create-environmentCreate a new environment
create-folderCreate a new folder
invite-members-to-projectInvite one or more members to a project
list-projectsList all projects
Instructions1. Set the environment variables as described in the [Environment Variables ](#environment-variables) step. 2. Run the command to start the MCP Inspector. 3. Open the MCP Inspector UI in your browser and click Connect to

How to install the Infisical MCP server

#### Access Token

```json
{
  "mcpServers": {
    "infisical": {
      "command": "npx",
      "args": ["-y", "@infisical/mcp"],
      "env": {
        "INFISICAL_HOST_URL": "https://<custom-host-url>.com",
        "INFISICAL_AUTH_METHOD": "access-token",
        "INFISICAL_TOKEN": "<your-access-token>"
      }
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

VariableDescriptionRequired
INFISICAL_HOST_URLEndpoint or connection string the server talks to.Yes
INFISICAL_UNIVERSAL_AUTH_CLIENT_IDConfiguration value read at startup.Optional
INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRETCredential the server authenticates with.Yes
INFISICAL_AUTH_METHODConfiguration value read at startup.Optional
INFISICAL_TOKENCredential the server authenticates with.Yes

Example prompts to try

  • Use Infisical to create-secret.
  • Use Infisical to delete-secret.
  • Use Infisical to update-secret.

Frequently asked questions

It connects Infisical to MCP-compatible AI assistants such as Claude and Cursor, exposing 11 tools (create-secret, delete-secret, update-secret, and more) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with Infisical directly.