What can you do with the Infisical integration?

LiveContext exposes 141 operations on Infisical, covering group, identitie, role and membership.

Infisical integration

Infisical is an open-source secrets manager. An agent can read and write the secrets of a project environment and folder path (single reads, batch writes, moves and tag attachments), organise them in folders and secret imports, issue and renew dynamic-secret leases for databases and cloud accounts, create one-time shared-secret links, and encrypt, decrypt, sign or verify data with a KMS key without ever handling the key material. Around that it manages projects, their environments, roles, tags, secret validation rules, members, groups and machine identities, organisation roles, memberships and audit logs, org-wide groups and machine identities, and project templates. Only the discovery calls of app connections and secret syncs are included, since each connector type has its own endpoint family. Certificate management, PKI, secret rotations and secret scanning are not included. The credential is an Infisical token (a machine-identity access token or a service token) sent as a bearer token. The host is part of the credential: enter app.infisical.com or eu.infisical.com for the managed cloud, or the domain of a self-hosted install.

141 toolsTokenAPI docs

Connect Infisical How integrations work

What you can do with Infisical

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Group, 8 operations

POSTadd_group_to_project
Deprecated: Use POST /api/v1/projects/:projectId/memberships/groups/:groupId instead. Add group to project.
POSTcreate_group
create group.
DELETEdelete_group
delete group.
GETget_group
get group.
GETget_project_group
Deprecated: Use GET /api/v1/projects/:projectId/memberships/groups/:groupId instead. Return project group.
GETlist_groups
list group.
GETlist_project_groups
Deprecated: Use GET /api/v1/projects/:projectId/memberships/groups instead. Return list of groups in project.
DELETEremove_group_from_project
Deprecated: Use DELETE /api/v1/projects/:projectId/memberships/groups/:groupId instead. Remove group from project.

Identitie, 8 operations

POSTcreate_machine_identity
Create machine identity.
POSTcreate_project_machine_identity
Create an identity in a project.
DELETEdelete_machine_identity
Delete machine identity.
DELETEdelete_project_identity
Delete an identity from a project.
GETget_machine_identity
Get a machine identity by id.
GETget_project_identity
Get an identity by ID in a project.
GETlist_machine_identities
List machine identities.
GETlist_project_machine_identities
List identities in a project.

Role, 8 operations

POSTcreate_organization_role
Create an organization role.
POSTcreate_project_role
Create a project role.
DELETEdelete_organization_role
Delete an organization role.
DELETEdelete_project_role
Delete a project role.
GETget_organization_role
Get an organization role.
GETget_project_role_by_id
Get a project role by ID.
GETlist_organization_roles
List organization roles.
GETlist_project_roles
List project role.

Membership, 6 operations

DELETEbulk_delete_organization_memberships
Bulk delete organization user memberships.
DELETEdelete_organization_membership
Delete organization user memberships.
POSTinvite_project_members
Invite members to project.
GETlist_organization_memberships
Return organization user memberships.
GETlist_project_memberships
Return project user memberships.
DELETEremove_project_members
Remove members from project.

Raw, 6 operations

POSTcreate_secret
Create secret.
POSTcreate_secrets_batch
Create many secrets.
DELETEdelete_secret
Delete secret.
DELETEdelete_secrets_batch
Delete many secrets.
GETget_secret
Get a secret by name.
GETlist_secrets
List secrets.

Tag, 6 operations

POSTattach_secret_tags
Attach tags to a secret.
POSTcreate_project_tag
create tag.
DELETEdelete_project_tag
delete tag.
DELETEdetach_secret_tags
Detach tags from a secret.
GETget_project_tag
get tag.
GETlist_project_tags
list tag.

Dynamic secret, 5 operations

POSTcreate_dynamic_secret
create dynamic_secret.
DELETEdelete_dynamic_secret
delete dynamic_secret.
GETget_dynamic_secret
get dynamic_secret.
GETlist_dynamic_secrets
list dynamic_secret.
PATCHupdate_dynamic_secret
update dynamic_secret.

Project, 5 operations

POSTcreate_project
Create a new project.
DELETEdelete_project
Delete project.
GETget_project
Get project.
GETlist_group_projects
list project.
GETlist_projects
List projects.

Slug, 5 operations

GETget_organization_role_by_slug
Get an organization role by slug.
GETget_project_by_slug
Get project details by slug.
GETget_project_environment_by_slug
Get Environment by slug.
GETget_project_role_by_slug
get slug.
GETget_project_tag_by_slug
get slug.

Folder, 4 operations

POSTcreate_secret_folder
Create folders.
DELETEdelete_secret_folder
Delete a folder.
GETget_secret_folder
Get folder by id.
GETlist_secret_folders
Get folders.

Key, 4 operations

POSTcreate_kms_key
Create KMS key.
DELETEdelete_kms_key
Delete KMS key.
GETget_kms_key
Get KMS key by ID.
GETlist_kms_keys
List KMS keys.

Lease, 4 operations

POSTcreate_dynamic_secret_lease
create lease.
DELETEdelete_dynamic_secret_lease
delete lease.
GETget_dynamic_secret_lease
get lease.
GETlist_dynamic_secret_leases
list lease.

Project template, 4 operations

POSTcreate_project_template
Create a project template.
DELETEdelete_project_template
Delete a project template.
GETget_project_template
Get a project template by ID.
GETlist_project_templates
List project templates for the current organization.

Secret import, 4 operations

POSTcreate_secret_import
Create secret imports.
DELETEdelete_secret_import
Delete secret imports.
GETget_secret_import
Get single secret import.
GETlist_secret_imports
Get secret imports.

Shared secret, 4 operations

POSTcreate_shared_secret
Create a new shared secret that can be accessed by a link.
DELETEdelete_shared_secret
Delete a shared secret by its ID.
GETget_shared_secret
Returns the full shared secret object without revealing the secret value. Authentication is required for shared secrets that are scoped to an organization.
GETlist_shared_secrets
List all shared secrets created by the authenticated user or identity in their current organization.

Environment, 3 operations

POSTcreate_project_environment
Create environment.
DELETEdelete_project_environment
Delete environment.
GETget_project_environment
Get Environment by ID.

Machine identitie, 3 operations

POSTadd_machine_identity_to_group
update machine_identitie.
GETlist_group_machine_identities
list machine_identitie.
DELETEremove_machine_identity_from_group
delete machine_identitie.

Secret validation rule, 3 operations

POSTcreate_secret_validation_rule
Create Secret Validation Rule.
DELETEdelete_secret_validation_rule
Delete Secret Validation Rule.
GETlist_secret_validation_rules
List Secret Validation Rules.

User, 3 operations

POSTadd_user_to_group
update user.
GETlist_group_users
list user.
DELETEremove_user_from_group
delete user.

Move, 2 operations

POSTmove_secret_folder
Move a folder and its static-secret contents to a new path, optionally in a different environment.
POSTmove_secrets
create move.

Acces, 1 operation

POSTread_shared_secret
Access a shared secret by its ID. If the secret is password protected, you must provide the password in the request body. Returns the secret value if access is granted, or an.

App connection, 1 operation

GETlist_app_connections
List all the App Connections for the current organization or project.

Audit log, 1 operation

GETlist_organization_audit_logs
Get all audit logs for an organization.

Available group, 1 operation

GETlist_available_organization_groups
List available groups from parent org for linking to sub-organization.

Available identitie, 1 operation

GETlist_available_organization_identities
List available identities for org membership.

Count, 1 operation

POSTcount_machine_identities
Return per-scope counts of machine identities matching the given search filter. The response contains a count for every scope passed in the request body (zero when the caller has.

Decrypt, 1 operation

POSTdecrypt_with_kms_key
Decrypt data with KMS key.

Encrypt, 1 operation

POSTencrypt_with_kms_key
Encrypt data with KMS key.

Generate mac, 1 operation

POSTgenerate_mac_with_kms_key
Generate an HMAC (MAC) for data with a KMS key.

Id, 1 operation

GETget_secret_by_id
get id.

Identity membership, 1 operation

GETlist_organization_identity_memberships
Return organization identity memberships.

Key name, 1 operation

GETget_kms_key_by_name
Get KMS key by name.

Kubernete, 1 operation

POSTcreate_dynamic_secret_kubernetes_lease
create kubernete.

Member, 1 operation

GETlist_group_members
list member.

Private key, 1 operation

GETget_kms_key_private_key
Export the private key (or key material) for a KMS key. For asymmetric keys (sign/verify), the private key is returned. For symmetric keys (encrypt/decrypt), the key material is.

Public key, 1 operation

GETget_kms_key_public_key
Get the public key for a KMS key that is used for signing and verifying data. This endpoint is only available for asymmetric keys.

Renew, 1 operation

POSTrenew_dynamic_secret_lease
create renew.

Restore, 1 operation

POSTrestore_project_environment
Restore a soft-deleted environment.

Rotate, 1 operation

POSTrotate_kms_key
Rotate KMS key. Generates new key material for the key and increments its version. Previous key material is retained so existing ciphertexts remain decryptable; new encrypt.

Search, 1 operation

POSTsearch_machine_identities
Search machine identities across organization and/or project scopes. Returns identities the caller has access to, each annotated with all roles assigned to that membership.

Secret, 1 operation

GETlist_imported_secrets
list secret.

Secret sync, 1 operation

GETlist_secret_syncs
List all the Secret Syncs for the specified project.

Sign, 1 operation

POSTsign_with_kms_key
Sign data with a KMS key.

Signing algorithm, 1 operation

GETlist_kms_key_signing_algorithms
List all available signing algorithms for a KMS key.

Workspace, 1 operation

GETlist_organization_projects
Return projects in organization that user is apart of.

Showing the first 120 of 141 endpoints. The rest are in the product, searchable from the workflow builder and from chat.

Use Infisical from Claude Code, Cursor or Codex

Connect Infisical in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its Infisical operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect Infisical

Create your workspace
Sign up free. Nothing to install.
Connect Infisical once
Add your Infisical connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.