infisical MCP Server

Use This MCP server To

Integrate Infisical secrets into LLM workflows via MCP Authenticate and access secrets securely using environment variables Customize Infisical host URL for self-hosted or dedicated setups Enable function calling to fetch and manage secrets dynamically Use with Claude Desktop for enhanced secret management Automate secret retrieval in AI-enhanced development environments

README

Infisical Model Context Protocol

The Infisical Model Context Protocol server allows you to integrate with Infisical APIs through function calling. This protocol supports various tools to interact with Infisical.

Setup

Environment variables

In order to use the MCP server, you must first set the environment variables required for authentication.

INFISICAL_UNIVERSAL_AUTH_CLIENT_ID: The Machine Identity universal auth client ID that will be used for authentication
INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET: The Machine Identity universal auth client secret that will be used for authentication.
INFISICAL_HOST_URL: Optionally set a custom host URL. This is useful if you're self-hosting Infisical or you're on dedicated infrastructure. Defaults to https://app.infisical.com

To run the Infisical MCP server using npx, use the following command:

npx -y @infisical/mcp

Usage with Claude Desktop

Add the following to your claude_desktop_config.json. See here for more details.

{
  "mcpServers": {
    "infisical": {
      "command": "npx",
      "args": ["-y", "@infisical/mcp"],
      "env": {
        "INFISICAL_HOST_URL": "https://<custom-host-url>.com", // Optional
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret"
      }
    }
  }
}

Available tools

Tool	Description
`create-secret`	Create a new secret
`delete-secret`	Delete a secret
`update-secret`	Update a secret
`list-secrets`	Lists all secrets
`get-secret`	Get a single secret
`create-project`	Create a new project
`create-environment`	Create a new environment
`create-folder`	Create a new folder
`invite-members-to-project`	Invite one or more members to a project

Debugging the Server

To debug your server, you can use the MCP Inspector.

First build the server

npm run build

Run the following command in your terminal:

# Start MCP Inspector and server
npx @modelcontextprotocol/inspector node dist/index.js

Instructions

Set the environment variables as described in the Environment Variables step.
Run the command to start the MCP Inspector.
Open the MCP Inspector UI in your browser and click Connect to start the MCP server.
You can see all the available tools and test them individually.

infisical-mcp-server FAQ

How do I authenticate the Infisical MCP server?

Set environment variables INFISICAL_UNIVERSAL_AUTH_CLIENT_ID and INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET for machine identity authentication.

Can I use a custom Infisical host URL?

Yes, set the INFISICAL_HOST_URL environment variable to your custom or self-hosted Infisical instance URL.

How do I run the Infisical MCP server quickly?

Use the command `npx -y @infisical/mcp` to start the server without manual installation.

What functionality does the Infisical MCP server provide?

It allows function calling to interact with Infisical APIs for secret management within MCP workflows.

Is the Infisical MCP server compatible with multiple LLM providers?

Yes, it works with models like OpenAI, Claude, and Gemini through the MCP standard.

How does the server enhance security in AI workflows?

By securely managing and injecting secrets at runtime, reducing hardcoded credentials.

Can I integrate the Infisical MCP server with desktop clients?

Yes, it supports integration with clients like Claude Desktop for streamlined secret access.