Integration

Infisical integration

Infisical is an open-source secrets manager. An agent can read and write the secrets of a project environment and folder path (single reads, batch writes, moves and tag attachments), organise them in folders and secret imports, issue and renew dynamic-secret leases for databases and cloud accounts, create one-time shared-secret links, and encrypt, decrypt, sign or verify data with a KMS key without ever handling the key material. Around that it manages projects, their environments, roles, tags, secret validation rules, members, groups and machine identities, organisation roles, memberships and audit logs, org-wide groups and machine identities, and project templates. Only the discovery calls of app connections and secret syncs are included, since each connector type has its own endpoint family. Certificate management, PKI, secret rotations and secret scanning are not included. The credential is an Infisical token (a machine-identity access token or a service token) sent as a bearer token. The host is part of the credential: enter app.infisical.com or eu.infisical.com for the managed cloud, or the domain of a self-hosted install.

Connect Infisical How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in Infisical.Built from the 141 Infisical tools below, on the connection you add once.

What you can do with Infisical

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Group, 8 operations

add_group_to_projectAdd group to projectPOSTDeprecated: Use POST /api/v1/projects/:projectId/memberships/groups/:groupId instead. Add group to project.
create_groupCreate groupPOSTcreate group.
delete_groupDelete groupDELETEdelete group.
get_groupGet groupGETget group.
get_project_groupGet project groupGETDeprecated: Use GET /api/v1/projects/:projectId/memberships/groups/:groupId instead. Return project group.
list_groupsList groupsGETlist group.
list_project_groupsList project groupsGETDeprecated: Use GET /api/v1/projects/:projectId/memberships/groups instead. Return list of groups in project.
remove_group_from_projectRemove group from projectDELETEDeprecated: Use DELETE /api/v1/projects/:projectId/memberships/groups/:groupId instead. Remove group from project.

Identitie, 8 operations

create_machine_identityCreate machine identityPOSTCreate machine identity.
create_project_machine_identityCreate project machine identityPOSTCreate an identity in a project.
delete_machine_identityDelete machine identityDELETEDelete machine identity.
delete_project_identityDelete project identityDELETEDelete an identity from a project.
get_machine_identityGet machine identityGETGet a machine identity by id.
get_project_identityGet project identityGETGet an identity by ID in a project.
list_machine_identitiesList machine identitiesGETList machine identities.
list_project_machine_identitiesList project machine identitiesGETList identities in a project.

Role, 8 operations

create_organization_roleCreate organization rolePOSTCreate an organization role.
create_project_roleCreate project rolePOSTCreate a project role.
delete_organization_roleDelete organization roleDELETEDelete an organization role.
delete_project_roleDelete project roleDELETEDelete a project role.
get_organization_roleGet organization roleGETGet an organization role.
get_project_role_by_idGet project role by idGETGet a project role by ID.
list_organization_rolesList organization rolesGETList organization roles.
list_project_rolesList project rolesGETList project role.

Membership, 6 operations

bulk_delete_organization_membershipsBulk delete organization membershipsDELETEBulk delete organization user memberships.
delete_organization_membershipDelete organization membershipDELETEDelete organization user memberships.
invite_project_membersInvite project membersPOSTInvite members to project.
list_organization_membershipsList organization membershipsGETReturn organization user memberships.
list_project_membershipsList project membershipsGETReturn project user memberships.
remove_project_membersRemove project membersDELETERemove members from project.

Raw, 6 operations

create_secretCreate secretPOSTCreate secret.
create_secrets_batchCreate secrets batchPOSTCreate many secrets.
delete_secretDelete secretDELETEDelete secret.
delete_secrets_batchDelete secrets batchDELETEDelete many secrets.
get_secretGet secretGETGet a secret by name.
list_secretsList secretsGETList secrets.

Tag, 6 operations

attach_secret_tagsAttach secret tagsPOSTAttach tags to a secret.
create_project_tagCreate project tagPOSTcreate tag.
delete_project_tagDelete project tagDELETEdelete tag.
detach_secret_tagsDetach secret tagsDELETEDetach tags from a secret.
get_project_tagGet project tagGETget tag.
list_project_tagsList project tagsGETlist tag.

Dynamic secret, 5 operations

create_dynamic_secretCreate dynamic secretPOSTcreate dynamic_secret.
delete_dynamic_secretDelete dynamic secretDELETEdelete dynamic_secret.
get_dynamic_secretGet dynamic secretGETget dynamic_secret.
list_dynamic_secretsList dynamic secretsGETlist dynamic_secret.
update_dynamic_secretUpdate dynamic secretPATCHupdate dynamic_secret.

Project, 5 operations

create_projectCreate projectPOSTCreate a new project.
delete_projectDelete projectDELETEDelete project.
get_projectGet projectGETGet project.
list_group_projectsList group projectsGETlist project.
list_projectsList projectsGETList projects.

Slug, 5 operations

get_organization_role_by_slugGet organization role by slugGETGet an organization role by slug.
get_project_by_slugGet project by slugGETGet project details by slug.
get_project_environment_by_slugGet project environment by slugGETGet Environment by slug.
get_project_role_by_slugGet project role by slugGETget slug.
get_project_tag_by_slugGet project tag by slugGETget slug.

Folder, 4 operations

create_secret_folderCreate secret folderPOSTCreate folders.
delete_secret_folderDelete secret folderDELETEDelete a folder.
get_secret_folderGet secret folderGETGet folder by id.
list_secret_foldersList secret foldersGETGet folders.

Key, 4 operations

create_kms_keyCreate kms keyPOSTCreate KMS key.
delete_kms_keyDelete kms keyDELETEDelete KMS key.
get_kms_keyGet kms keyGETGet KMS key by ID.
list_kms_keysList kms keysGETList KMS keys.

Lease, 4 operations

create_dynamic_secret_leaseCreate dynamic secret leasePOSTcreate lease.
delete_dynamic_secret_leaseDelete dynamic secret leaseDELETEdelete lease.
get_dynamic_secret_leaseGet dynamic secret leaseGETget lease.
list_dynamic_secret_leasesList dynamic secret leasesGETlist lease.

Project template, 4 operations

create_project_templateCreate project templatePOSTCreate a project template.
delete_project_templateDelete project templateDELETEDelete a project template.
get_project_templateGet project templateGETGet a project template by ID.
list_project_templatesList project templatesGETList project templates for the current organization.

Secret import, 4 operations

create_secret_importCreate secret importPOSTCreate secret imports.
delete_secret_importDelete secret importDELETEDelete secret imports.
get_secret_importGet secret importGETGet single secret import.
list_secret_importsList secret importsGETGet secret imports.

Shared secret, 4 operations

create_shared_secretCreate shared secretPOSTCreate a new shared secret that can be accessed by a link.
delete_shared_secretDelete shared secretDELETEDelete a shared secret by its ID.
get_shared_secretGet shared secretGETReturns the full shared secret object without revealing the secret value. Authentication is required for shared secrets that are scoped to an organization.
list_shared_secretsList shared secretsGETList all shared secrets created by the authenticated user or identity in their current organization.

Environment, 3 operations

create_project_environmentCreate project environmentPOSTCreate environment.
delete_project_environmentDelete project environmentDELETEDelete environment.
get_project_environmentGet project environmentGETGet Environment by ID.

Machine identitie, 3 operations

add_machine_identity_to_groupAdd machine identity to groupPOSTupdate machine_identitie.
list_group_machine_identitiesList group machine identitiesGETlist machine_identitie.
remove_machine_identity_from_groupRemove machine identity from groupDELETEdelete machine_identitie.

Secret validation rule, 3 operations

create_secret_validation_ruleCreate secret validation rulePOSTCreate Secret Validation Rule.
delete_secret_validation_ruleDelete secret validation ruleDELETEDelete Secret Validation Rule.
list_secret_validation_rulesList secret validation rulesGETList Secret Validation Rules.

User, 3 operations

add_user_to_groupAdd user to groupPOSTupdate user.
list_group_usersList group usersGETlist user.
remove_user_from_groupRemove user from groupDELETEdelete user.

Move, 2 operations

move_secret_folderMove secret folderPOSTMove a folder and its static-secret contents to a new path, optionally in a different environment.
move_secretsMove secretsPOSTcreate move.

Acces, 1 operation

read_shared_secretRead shared secretPOSTAccess a shared secret by its ID. If the secret is password protected, you must provide the password in the request body. Returns the secret value if access is granted, or an.

App connection, 1 operation

list_app_connectionsList app connectionsGETList all the App Connections for the current organization or project.

Audit log, 1 operation

list_organization_audit_logsList organization audit logsGETGet all audit logs for an organization.

Available group, 1 operation

list_available_organization_groupsList available organization groupsGETList available groups from parent org for linking to sub-organization.

Available identitie, 1 operation

list_available_organization_identitiesList available organization identitiesGETList available identities for org membership.

Count, 1 operation

count_machine_identitiesCount machine identitiesPOSTReturn per-scope counts of machine identities matching the given search filter. The response contains a count for every scope passed in the request body (zero when the caller has.

Decrypt, 1 operation

decrypt_with_kms_keyDecrypt with kms keyPOSTDecrypt data with KMS key.

Encrypt, 1 operation

encrypt_with_kms_keyEncrypt with kms keyPOSTEncrypt data with KMS key.

Generate mac, 1 operation

generate_mac_with_kms_keyGenerate mac with kms keyPOSTGenerate an HMAC (MAC) for data with a KMS key.

Id, 1 operation

get_secret_by_idGet secret by idGETget id.

Identity membership, 1 operation

list_organization_identity_membershipsList organization identity membershipsGETReturn organization identity memberships.

Key name, 1 operation

get_kms_key_by_nameGet kms key by nameGETGet KMS key by name.

Kubernete, 1 operation

create_dynamic_secret_kubernetes_leaseCreate dynamic secret kubernetes leasePOSTcreate kubernete.

Member, 1 operation

list_group_membersList group membersGETlist member.

Private key, 1 operation

get_kms_key_private_keyGet kms key private keyGETExport the private key (or key material) for a KMS key. For asymmetric keys (sign/verify), the private key is returned. For symmetric keys (encrypt/decrypt), the key material is.

Public key, 1 operation

get_kms_key_public_keyGet kms key public keyGETGet the public key for a KMS key that is used for signing and verifying data. This endpoint is only available for asymmetric keys.

Renew, 1 operation

renew_dynamic_secret_leaseRenew dynamic secret leasePOSTcreate renew.

Restore, 1 operation

restore_project_environmentRestore project environmentPOSTRestore a soft-deleted environment.

Rotate, 1 operation

rotate_kms_keyRotate kms keyPOSTRotate KMS key. Generates new key material for the key and increments its version. Previous key material is retained so existing ciphertexts remain decryptable; new encrypt.

Search, 1 operation

search_machine_identitiesSearch machine identitiesPOSTSearch machine identities across organization and/or project scopes. Returns identities the caller has access to, each annotated with all roles assigned to that membership.

Secret, 1 operation

list_imported_secretsList imported secretsGETlist secret.

Secret sync, 1 operation

list_secret_syncsList secret syncsGETList all the Secret Syncs for the specified project.

Sign, 1 operation

sign_with_kms_keySign with kms keyPOSTSign data with a KMS key.

Signing algorithm, 1 operation

list_kms_key_signing_algorithmsList kms key signing algorithmsGETList all available signing algorithms for a KMS key.

Workspace, 1 operation

list_organization_projectsList organization projectsGETReturn projects in organization that user is apart of.

Showing the first 120 of 141 endpoints. The rest are in the product, searchable from the workflow builder and from chat.

Use Infisical from Claude Code, Cursor or Codex

Connect Infisical in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Infisical operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect Infisical

Create your workspace
Sign up free. Nothing to install.
Connect Infisical once
Add your Infisical connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.