Infisical

Use Infisical to list, read, create, update, or delete secrets in a project environment. Configure the API key, project ID, environment slug, and any secret path required by the selected operation.

Usage Instructions

Integrate Infisical into your workflow. List, get, create, update, and delete secrets across project environments.

Actions

Infisical List Secrets

List all secrets in a project environment. Returns secret keys, values, comments, tags, and metadata.

Input

Parameter	Type	Required	Description
`apiKey`	string	Yes	Infisical API token
`baseUrl`	string	No	Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
`projectId`	string	Yes	The ID of the project to list secrets from
`environment`	string	Yes	The environment slug (e.g., "dev", "staging", "prod")
`secretPath`	string	No	The path of the secrets (default: "/")
`recursive`	boolean	No	Whether to fetch secrets recursively from subdirectories
`expandSecretReferences`	boolean	No	Whether to expand secret references (default: true)
`viewSecretValue`	boolean	No	Whether to include secret values in the response (default: true)
`includeImports`	boolean	No	Whether to include imported secrets (default: true)
`tagSlugs`	string	No	Comma-separated tag slugs to filter secrets by

Output

Parameter	Type	Description
`secrets`	array	Array of secrets
↳ `id`	string	Secret ID
↳ `workspace`	string	Workspace/project ID
↳ `secretKey`	string	Secret name/key
↳ `secretValue`	string	Secret value
↳ `secretComment`	string	Secret comment
↳ `secretPath`	string	Secret path
↳ `version`	number	Secret version
↳ `type`	string	Secret type (shared or personal)
↳ `environment`	string	Environment slug
↳ `secretValueHidden`	boolean	Whether the secret value was hidden in the response
↳ `isRotatedSecret`	boolean	Whether the secret is managed by secret rotation
↳ `rotationId`	string	Secret rotation ID
↳ `secretReminderNote`	string	Rotation reminder note
↳ `secretReminderRepeatDays`	number	Rotation reminder interval in days
↳ `skipMultilineEncoding`	boolean	Whether multiline encoding is skipped for this secret
↳ `tags`	array	Tags attached to the secret
↳ `id`	string	Tag ID
↳ `slug`	string	Tag slug
↳ `color`	string	Tag color
↳ `name`	string	Tag name
↳ `secretMetadata`	array	Custom metadata key-value pairs
↳ `key`	string	Metadata key
↳ `value`	string	Metadata value
↳ `isEncrypted`	boolean	Whether the metadata value is encrypted
↳ `actor`	object	Identity that last modified the secret
↳ `actorId`	string	Actor ID
↳ `actorType`	string	Actor type
↳ `name`	string	Actor name
↳ `membershipId`	string	Membership ID
↳ `groupId`	string	Group ID
↳ `createdAt`	string	Creation timestamp
↳ `updatedAt`	string	Last update timestamp
`count`	number	Total number of secrets returned

Infisical Get Secret

Retrieve a single secret by name from a project environment.

Input

Parameter	Type	Required	Description
`apiKey`	string	Yes	Infisical API token
`baseUrl`	string	No	Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
`projectId`	string	Yes	The ID of the project
`environment`	string	Yes	The environment slug (e.g., "dev", "staging", "prod")
`secretName`	string	Yes	The name of the secret to retrieve
`secretPath`	string	No	The path of the secret (default: "/")
`version`	number	No	Specific version of the secret to retrieve
`type`	string	No	Secret type: "shared" or "personal" (default: "shared")
`viewSecretValue`	boolean	No	Whether to include the secret value in the response (default: true)
`expandSecretReferences`	boolean	No	Whether to expand secret references (default: true)

Output

Parameter	Type	Description
`secret`	object	The retrieved secret
↳ `id`	string	Secret ID
↳ `workspace`	string	Workspace/project ID
↳ `secretKey`	string	Secret name/key
↳ `secretValue`	string	Secret value
↳ `secretComment`	string	Secret comment
↳ `secretPath`	string	Secret path
↳ `version`	number	Secret version
↳ `type`	string	Secret type (shared or personal)
↳ `environment`	string	Environment slug
↳ `secretValueHidden`	boolean	Whether the secret value was hidden in the response
↳ `isRotatedSecret`	boolean	Whether the secret is managed by secret rotation
↳ `rotationId`	string	Secret rotation ID
↳ `secretReminderNote`	string	Rotation reminder note
↳ `secretReminderRepeatDays`	number	Rotation reminder interval in days
↳ `skipMultilineEncoding`	boolean	Whether multiline encoding is skipped for this secret
↳ `tags`	array	Tags attached to the secret
↳ `id`	string	Tag ID
↳ `slug`	string	Tag slug
↳ `color`	string	Tag color
↳ `name`	string	Tag name
↳ `secretMetadata`	array	Custom metadata key-value pairs
↳ `key`	string	Metadata key
↳ `value`	string	Metadata value
↳ `isEncrypted`	boolean	Whether the metadata value is encrypted
↳ `actor`	object	Identity that last modified the secret
↳ `actorId`	string	Actor ID
↳ `actorType`	string	Actor type
↳ `name`	string	Actor name
↳ `membershipId`	string	Membership ID
↳ `groupId`	string	Group ID
↳ `createdAt`	string	Creation timestamp
↳ `updatedAt`	string	Last update timestamp

Infisical Create Secret

Create a new secret in a project environment.

Input

Parameter	Type	Required	Description
`apiKey`	string	Yes	Infisical API token
`baseUrl`	string	No	Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
`projectId`	string	Yes	The ID of the project
`environment`	string	Yes	The environment slug (e.g., "dev", "staging", "prod")
`secretName`	string	Yes	The name of the secret to create
`secretValue`	string	Yes	The value of the secret
`secretPath`	string	No	The path for the secret (default: "/")
`secretComment`	string	No	A comment for the secret
`type`	string	No	Secret type: "shared" or "personal" (default: "shared")
`tagIds`	string	No	Comma-separated tag IDs to attach to the secret

Output

Parameter	Type	Description
`secret`	object	The created secret
↳ `id`	string	Secret ID
↳ `workspace`	string	Workspace/project ID
↳ `secretKey`	string	Secret name/key
↳ `secretValue`	string	Secret value
↳ `secretComment`	string	Secret comment
↳ `secretPath`	string	Secret path
↳ `version`	number	Secret version
↳ `type`	string	Secret type (shared or personal)
↳ `environment`	string	Environment slug
↳ `secretValueHidden`	boolean	Whether the secret value was hidden in the response
↳ `isRotatedSecret`	boolean	Whether the secret is managed by secret rotation
↳ `rotationId`	string	Secret rotation ID
↳ `secretReminderNote`	string	Rotation reminder note
↳ `secretReminderRepeatDays`	number	Rotation reminder interval in days
↳ `skipMultilineEncoding`	boolean	Whether multiline encoding is skipped for this secret
↳ `tags`	array	Tags attached to the secret
↳ `id`	string	Tag ID
↳ `slug`	string	Tag slug
↳ `color`	string	Tag color
↳ `name`	string	Tag name
↳ `secretMetadata`	array	Custom metadata key-value pairs
↳ `key`	string	Metadata key
↳ `value`	string	Metadata value
↳ `isEncrypted`	boolean	Whether the metadata value is encrypted
↳ `actor`	object	Identity that last modified the secret
↳ `actorId`	string	Actor ID
↳ `actorType`	string	Actor type
↳ `name`	string	Actor name
↳ `membershipId`	string	Membership ID
↳ `groupId`	string	Group ID
↳ `createdAt`	string	Creation timestamp
↳ `updatedAt`	string	Last update timestamp

Infisical Update Secret

Update an existing secret in a project environment.

Input

Parameter	Type	Required	Description
`apiKey`	string	Yes	Infisical API token
`baseUrl`	string	No	Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
`projectId`	string	Yes	The ID of the project
`environment`	string	Yes	The environment slug (e.g., "dev", "staging", "prod")
`secretName`	string	Yes	The name of the secret to update
`secretValue`	string	No	The new value for the secret
`secretPath`	string	No	The path of the secret (default: "/")
`secretComment`	string	No	A comment for the secret
`newSecretName`	string	No	New name for the secret (to rename it)
`type`	string	No	Secret type: "shared" or "personal" (default: "shared")
`tagIds`	string	No	Comma-separated tag IDs to set on the secret

Output

Parameter	Type	Description
`secret`	object	The updated secret
↳ `id`	string	Secret ID
↳ `workspace`	string	Workspace/project ID
↳ `secretKey`	string	Secret name/key
↳ `secretValue`	string	Secret value
↳ `secretComment`	string	Secret comment
↳ `secretPath`	string	Secret path
↳ `version`	number	Secret version
↳ `type`	string	Secret type (shared or personal)
↳ `environment`	string	Environment slug
↳ `secretValueHidden`	boolean	Whether the secret value was hidden in the response
↳ `isRotatedSecret`	boolean	Whether the secret is managed by secret rotation
↳ `rotationId`	string	Secret rotation ID
↳ `secretReminderNote`	string	Rotation reminder note
↳ `secretReminderRepeatDays`	number	Rotation reminder interval in days
↳ `skipMultilineEncoding`	boolean	Whether multiline encoding is skipped for this secret
↳ `tags`	array	Tags attached to the secret
↳ `id`	string	Tag ID
↳ `slug`	string	Tag slug
↳ `color`	string	Tag color
↳ `name`	string	Tag name
↳ `secretMetadata`	array	Custom metadata key-value pairs
↳ `key`	string	Metadata key
↳ `value`	string	Metadata value
↳ `isEncrypted`	boolean	Whether the metadata value is encrypted
↳ `actor`	object	Identity that last modified the secret
↳ `actorId`	string	Actor ID
↳ `actorType`	string	Actor type
↳ `name`	string	Actor name
↳ `membershipId`	string	Membership ID
↳ `groupId`	string	Group ID
↳ `createdAt`	string	Creation timestamp
↳ `updatedAt`	string	Last update timestamp

Infisical Delete Secret

Delete a secret from a project environment.

Input

Parameter	Type	Required	Description
`apiKey`	string	Yes	Infisical API token
`baseUrl`	string	No	Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
`projectId`	string	Yes	The ID of the project
`environment`	string	Yes	The environment slug (e.g., "dev", "staging", "prod")
`secretName`	string	Yes	The name of the secret to delete
`secretPath`	string	No	The path of the secret (default: "/")
`type`	string	No	Secret type: "shared" or "personal" (default: "shared")

Output

Parameter	Type	Description
`secret`	object	The deleted secret
↳ `id`	string	Secret ID
↳ `workspace`	string	Workspace/project ID
↳ `secretKey`	string	Secret name/key
↳ `secretValue`	string	Secret value
↳ `secretComment`	string	Secret comment
↳ `secretPath`	string	Secret path
↳ `version`	number	Secret version
↳ `type`	string	Secret type (shared or personal)
↳ `environment`	string	Environment slug
↳ `secretValueHidden`	boolean	Whether the secret value was hidden in the response
↳ `isRotatedSecret`	boolean	Whether the secret is managed by secret rotation
↳ `rotationId`	string	Secret rotation ID
↳ `secretReminderNote`	string	Rotation reminder note
↳ `secretReminderRepeatDays`	number	Rotation reminder interval in days
↳ `skipMultilineEncoding`	boolean	Whether multiline encoding is skipped for this secret
↳ `tags`	array	Tags attached to the secret
↳ `id`	string	Tag ID
↳ `slug`	string	Tag slug
↳ `color`	string	Tag color
↳ `name`	string	Tag name
↳ `secretMetadata`	array	Custom metadata key-value pairs
↳ `key`	string	Metadata key
↳ `value`	string	Metadata value
↳ `isEncrypted`	boolean	Whether the metadata value is encrypted
↳ `actor`	object	Identity that last modified the secret
↳ `actorId`	string	Actor ID
↳ `actorType`	string	Actor type
↳ `name`	string	Actor name
↳ `membershipId`	string	Membership ID
↳ `groupId`	string	Group ID
↳ `createdAt`	string	Creation timestamp
↳ `updatedAt`	string	Last update timestamp

Infisical

On this page