Infisical

Use Infisical to list, read, create, update, or delete secrets in a project environment. Configure the API key, project ID, environment slug, and any secret path required by the selected operation.

Use the block

List, get, create, update, and delete secrets across project environments.

Actions

Infisical List Secrets

List all secrets in a project environment. Returns secret keys, values, comments, tags, and metadata.

Inputs and outputs

Input

Parameter	Type	Required	Description
apiKey	string	Yes	Infisical API token
baseUrl	string	No	Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
projectId	string	Yes	The ID of the project to list secrets from
environment	string	Yes	The environment slug (e.g., "dev", "staging", "prod")
secretPath	string	No	The path of the secrets (default: "/")
recursive	boolean	No	Whether to fetch secrets recursively from subdirectories
expandSecretReferences	boolean	No	Whether to expand secret references (default: true)
viewSecretValue	boolean	No	Whether to include secret values in the response (default: true)
includeImports	boolean	No	Whether to include imported secrets (default: true)
tagSlugs	string	No	Comma-separated tag slugs to filter secrets by

Output

Parameter	Type	Description
secrets	array	Array of secrets
↳ id	string	Secret ID
↳ workspace	string	Workspace/project ID
↳ secretKey	string	Secret name/key
↳ secretValue	string	Secret value
↳ secretComment	string	Secret comment
↳ secretPath	string	Secret path
↳ version	number	Secret version
↳ type	string	Secret type (shared or personal)
↳ environment	string	Environment slug
↳ secretValueHidden	boolean	Whether the secret value was hidden in the response
↳ isRotatedSecret	boolean	Whether the secret is managed by secret rotation
↳ rotationId	string	Secret rotation ID
↳ secretReminderNote	string	Rotation reminder note
↳ secretReminderRepeatDays	number	Rotation reminder interval in days
↳ skipMultilineEncoding	boolean	Whether multiline encoding is skipped for this secret
↳ tags	array	Tags attached to the secret
↳ id	string	Tag ID
↳ slug	string	Tag slug
↳ color	string	Tag color
↳ name	string	Tag name
↳ secretMetadata	array	Custom metadata key-value pairs
↳ key	string	Metadata key
↳ value	string	Metadata value
↳ isEncrypted	boolean	Whether the metadata value is encrypted
↳ actor	object	Identity that last modified the secret
↳ actorId	string	Actor ID
↳ actorType	string	Actor type
↳ name	string	Actor name
↳ membershipId	string	Membership ID
↳ groupId	string	Group ID
↳ createdAt	string	Creation timestamp
↳ updatedAt	string	Last update timestamp
count	number	Total number of secrets returned

Infisical Get Secret

Retrieve a single secret by name from a project environment.

Inputs and outputs

Input

Parameter	Type	Required	Description
apiKey	string	Yes	Infisical API token
baseUrl	string	No	Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
projectId	string	Yes	The ID of the project
environment	string	Yes	The environment slug (e.g., "dev", "staging", "prod")
secretName	string	Yes	The name of the secret to retrieve
secretPath	string	No	The path of the secret (default: "/")
version	number	No	Specific version of the secret to retrieve
type	string	No	Secret type: "shared" or "personal" (default: "shared")
viewSecretValue	boolean	No	Whether to include the secret value in the response (default: true)
expandSecretReferences	boolean	No	Whether to expand secret references (default: true)

Output

Parameter	Type	Description
secret	object	The retrieved secret
↳ id	string	Secret ID
↳ workspace	string	Workspace/project ID
↳ secretKey	string	Secret name/key
↳ secretValue	string	Secret value
↳ secretComment	string	Secret comment
↳ secretPath	string	Secret path
↳ version	number	Secret version
↳ type	string	Secret type (shared or personal)
↳ environment	string	Environment slug
↳ secretValueHidden	boolean	Whether the secret value was hidden in the response
↳ isRotatedSecret	boolean	Whether the secret is managed by secret rotation
↳ rotationId	string	Secret rotation ID
↳ secretReminderNote	string	Rotation reminder note
↳ secretReminderRepeatDays	number	Rotation reminder interval in days
↳ skipMultilineEncoding	boolean	Whether multiline encoding is skipped for this secret
↳ tags	array	Tags attached to the secret
↳ id	string	Tag ID
↳ slug	string	Tag slug
↳ color	string	Tag color
↳ name	string	Tag name
↳ secretMetadata	array	Custom metadata key-value pairs
↳ key	string	Metadata key
↳ value	string	Metadata value
↳ isEncrypted	boolean	Whether the metadata value is encrypted
↳ actor	object	Identity that last modified the secret
↳ actorId	string	Actor ID
↳ actorType	string	Actor type
↳ name	string	Actor name
↳ membershipId	string	Membership ID
↳ groupId	string	Group ID
↳ createdAt	string	Creation timestamp
↳ updatedAt	string	Last update timestamp

Infisical Create Secret

Create a new secret in a project environment.

Inputs and outputs

Input

Parameter	Type	Required	Description
apiKey	string	Yes	Infisical API token
baseUrl	string	No	Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
projectId	string	Yes	The ID of the project
environment	string	Yes	The environment slug (e.g., "dev", "staging", "prod")
secretName	string	Yes	The name of the secret to create
secretValue	string	Yes	The value of the secret
secretPath	string	No	The path for the secret (default: "/")
secretComment	string	No	A comment for the secret
type	string	No	Secret type: "shared" or "personal" (default: "shared")
tagIds	string	No	Comma-separated tag IDs to attach to the secret

Output

Parameter	Type	Description
secret	object	The created secret
↳ id	string	Secret ID
↳ workspace	string	Workspace/project ID
↳ secretKey	string	Secret name/key
↳ secretValue	string	Secret value
↳ secretComment	string	Secret comment
↳ secretPath	string	Secret path
↳ version	number	Secret version
↳ type	string	Secret type (shared or personal)
↳ environment	string	Environment slug
↳ secretValueHidden	boolean	Whether the secret value was hidden in the response
↳ isRotatedSecret	boolean	Whether the secret is managed by secret rotation
↳ rotationId	string	Secret rotation ID
↳ secretReminderNote	string	Rotation reminder note
↳ secretReminderRepeatDays	number	Rotation reminder interval in days
↳ skipMultilineEncoding	boolean	Whether multiline encoding is skipped for this secret
↳ tags	array	Tags attached to the secret
↳ id	string	Tag ID
↳ slug	string	Tag slug
↳ color	string	Tag color
↳ name	string	Tag name
↳ secretMetadata	array	Custom metadata key-value pairs
↳ key	string	Metadata key
↳ value	string	Metadata value
↳ isEncrypted	boolean	Whether the metadata value is encrypted
↳ actor	object	Identity that last modified the secret
↳ actorId	string	Actor ID
↳ actorType	string	Actor type
↳ name	string	Actor name
↳ membershipId	string	Membership ID
↳ groupId	string	Group ID
↳ createdAt	string	Creation timestamp
↳ updatedAt	string	Last update timestamp

Infisical Update Secret

Update an existing secret in a project environment.

Inputs and outputs

Input

Parameter	Type	Required	Description
apiKey	string	Yes	Infisical API token
baseUrl	string	No	Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
projectId	string	Yes	The ID of the project
environment	string	Yes	The environment slug (e.g., "dev", "staging", "prod")
secretName	string	Yes	The name of the secret to update
secretValue	string	No	The new value for the secret
secretPath	string	No	The path of the secret (default: "/")
secretComment	string	No	A comment for the secret
newSecretName	string	No	New name for the secret (to rename it)
type	string	No	Secret type: "shared" or "personal" (default: "shared")
tagIds	string	No	Comma-separated tag IDs to set on the secret

Output

Parameter	Type	Description
secret	object	The updated secret
↳ id	string	Secret ID
↳ workspace	string	Workspace/project ID
↳ secretKey	string	Secret name/key
↳ secretValue	string	Secret value
↳ secretComment	string	Secret comment
↳ secretPath	string	Secret path
↳ version	number	Secret version
↳ type	string	Secret type (shared or personal)
↳ environment	string	Environment slug
↳ secretValueHidden	boolean	Whether the secret value was hidden in the response
↳ isRotatedSecret	boolean	Whether the secret is managed by secret rotation
↳ rotationId	string	Secret rotation ID
↳ secretReminderNote	string	Rotation reminder note
↳ secretReminderRepeatDays	number	Rotation reminder interval in days
↳ skipMultilineEncoding	boolean	Whether multiline encoding is skipped for this secret
↳ tags	array	Tags attached to the secret
↳ id	string	Tag ID
↳ slug	string	Tag slug
↳ color	string	Tag color
↳ name	string	Tag name
↳ secretMetadata	array	Custom metadata key-value pairs
↳ key	string	Metadata key
↳ value	string	Metadata value
↳ isEncrypted	boolean	Whether the metadata value is encrypted
↳ actor	object	Identity that last modified the secret
↳ actorId	string	Actor ID
↳ actorType	string	Actor type
↳ name	string	Actor name
↳ membershipId	string	Membership ID
↳ groupId	string	Group ID
↳ createdAt	string	Creation timestamp
↳ updatedAt	string	Last update timestamp

Infisical Delete Secret

Delete a secret from a project environment.

Inputs and outputs

Input

Parameter	Type	Required	Description
apiKey	string	Yes	Infisical API token
baseUrl	string	No	Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
projectId	string	Yes	The ID of the project
environment	string	Yes	The environment slug (e.g., "dev", "staging", "prod")
secretName	string	Yes	The name of the secret to delete
secretPath	string	No	The path of the secret (default: "/")
type	string	No	Secret type: "shared" or "personal" (default: "shared")

Output

Parameter	Type	Description
secret	object	The deleted secret
↳ id	string	Secret ID
↳ workspace	string	Workspace/project ID
↳ secretKey	string	Secret name/key
↳ secretValue	string	Secret value
↳ secretComment	string	Secret comment
↳ secretPath	string	Secret path
↳ version	number	Secret version
↳ type	string	Secret type (shared or personal)
↳ environment	string	Environment slug
↳ secretValueHidden	boolean	Whether the secret value was hidden in the response
↳ isRotatedSecret	boolean	Whether the secret is managed by secret rotation
↳ rotationId	string	Secret rotation ID
↳ secretReminderNote	string	Rotation reminder note
↳ secretReminderRepeatDays	number	Rotation reminder interval in days
↳ skipMultilineEncoding	boolean	Whether multiline encoding is skipped for this secret
↳ tags	array	Tags attached to the secret
↳ id	string	Tag ID
↳ slug	string	Tag slug
↳ color	string	Tag color
↳ name	string	Tag name
↳ secretMetadata	array	Custom metadata key-value pairs
↳ key	string	Metadata key
↳ value	string	Metadata value
↳ isEncrypted	boolean	Whether the metadata value is encrypted
↳ actor	object	Identity that last modified the secret
↳ actorId	string	Actor ID
↳ actorType	string	Actor type
↳ name	string	Actor name
↳ membershipId	string	Membership ID
↳ groupId	string	Group ID
↳ createdAt	string	Creation timestamp
↳ updatedAt	string	Last update timestamp