# Infisical (/integrations/infisical)





{/* MANUAL-CONTENT-START:intro */}

Use [Infisical](https://infisical.com/) to list, read, create, update, or delete secrets in a project environment. Configure the API key, project ID, environment slug, and any secret path required by the selected operation.

{/* MANUAL-CONTENT-END */}

## Use the block [#usage-instructions]

List, get, create, update, and delete secrets across project environments.

## Actions [#actions]

### Infisical List Secrets [#infisical-list-secrets]

List all secrets in a project environment. Returns secret keys, values, comments, tags, and metadata.

<ReferenceDetails>
  #### Input [#input]

  | Parameter | Type | Required | Description |
  | - | - | - | - |
  | `apiKey` | string | Yes | Infisical API token |
  | `baseUrl` | string | No | Infisical instance URL (default: "[https://us.infisical.com](https://us.infisical.com)"). Use "[https://eu.infisical.com](https://eu.infisical.com)" for EU Cloud or your self-hosted URL. |
  | `projectId` | string | Yes | The ID of the project to list secrets from |
  | `environment` | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
  | `secretPath` | string | No | The path of the secrets (default: "/") |
  | `recursive` | boolean | No | Whether to fetch secrets recursively from subdirectories |
  | `expandSecretReferences` | boolean | No | Whether to expand secret references (default: true) |
  | `viewSecretValue` | boolean | No | Whether to include secret values in the response (default: true) |
  | `includeImports` | boolean | No | Whether to include imported secrets (default: true) |
  | `tagSlugs` | string | No | Comma-separated tag slugs to filter secrets by |

  #### Output [#output]

  | Parameter | Type | Description |
  | - | - | - |
  | `secrets` | array | Array of secrets |
  | ↳ `id` | string | Secret ID |
  | ↳ `workspace` | string | Workspace/project ID |
  | ↳ `secretKey` | string | Secret name/key |
  | ↳ `secretValue` | string | Secret value |
  | ↳ `secretComment` | string | Secret comment |
  | ↳ `secretPath` | string | Secret path |
  | ↳ `version` | number | Secret version |
  | ↳ `type` | string | Secret type (shared or personal) |
  | ↳ `environment` | string | Environment slug |
  | ↳ `secretValueHidden` | boolean | Whether the secret value was hidden in the response |
  | ↳ `isRotatedSecret` | boolean | Whether the secret is managed by secret rotation |
  | ↳ `rotationId` | string | Secret rotation ID |
  | ↳ `secretReminderNote` | string | Rotation reminder note |
  | ↳ `secretReminderRepeatDays` | number | Rotation reminder interval in days |
  | ↳ `skipMultilineEncoding` | boolean | Whether multiline encoding is skipped for this secret |
  | ↳ `tags` | array | Tags attached to the secret |
  | ↳ `id` | string | Tag ID |
  | ↳ `slug` | string | Tag slug |
  | ↳ `color` | string | Tag color |
  | ↳ `name` | string | Tag name |
  | ↳ `secretMetadata` | array | Custom metadata key-value pairs |
  | ↳ `key` | string | Metadata key |
  | ↳ `value` | string | Metadata value |
  | ↳ `isEncrypted` | boolean | Whether the metadata value is encrypted |
  | ↳ `actor` | object | Identity that last modified the secret |
  | ↳ `actorId` | string | Actor ID |
  | ↳ `actorType` | string | Actor type |
  | ↳ `name` | string | Actor name |
  | ↳ `membershipId` | string | Membership ID |
  | ↳ `groupId` | string | Group ID |
  | ↳ `createdAt` | string | Creation timestamp |
  | ↳ `updatedAt` | string | Last update timestamp |
  | `count` | number | Total number of secrets returned |
</ReferenceDetails>

### Infisical Get Secret [#infisical-get-secret]

Retrieve a single secret by name from a project environment.

<ReferenceDetails>
  #### Input [#input-1]

  | Parameter | Type | Required | Description |
  | - | - | - | - |
  | `apiKey` | string | Yes | Infisical API token |
  | `baseUrl` | string | No | Infisical instance URL (default: "[https://us.infisical.com](https://us.infisical.com)"). Use "[https://eu.infisical.com](https://eu.infisical.com)" for EU Cloud or your self-hosted URL. |
  | `projectId` | string | Yes | The ID of the project |
  | `environment` | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
  | `secretName` | string | Yes | The name of the secret to retrieve |
  | `secretPath` | string | No | The path of the secret (default: "/") |
  | `version` | number | No | Specific version of the secret to retrieve |
  | `type` | string | No | Secret type: "shared" or "personal" (default: "shared") |
  | `viewSecretValue` | boolean | No | Whether to include the secret value in the response (default: true) |
  | `expandSecretReferences` | boolean | No | Whether to expand secret references (default: true) |

  #### Output [#output-1]

  | Parameter | Type | Description |
  | - | - | - |
  | `secret` | object | The retrieved secret |
  | ↳ `id` | string | Secret ID |
  | ↳ `workspace` | string | Workspace/project ID |
  | ↳ `secretKey` | string | Secret name/key |
  | ↳ `secretValue` | string | Secret value |
  | ↳ `secretComment` | string | Secret comment |
  | ↳ `secretPath` | string | Secret path |
  | ↳ `version` | number | Secret version |
  | ↳ `type` | string | Secret type (shared or personal) |
  | ↳ `environment` | string | Environment slug |
  | ↳ `secretValueHidden` | boolean | Whether the secret value was hidden in the response |
  | ↳ `isRotatedSecret` | boolean | Whether the secret is managed by secret rotation |
  | ↳ `rotationId` | string | Secret rotation ID |
  | ↳ `secretReminderNote` | string | Rotation reminder note |
  | ↳ `secretReminderRepeatDays` | number | Rotation reminder interval in days |
  | ↳ `skipMultilineEncoding` | boolean | Whether multiline encoding is skipped for this secret |
  | ↳ `tags` | array | Tags attached to the secret |
  | ↳ `id` | string | Tag ID |
  | ↳ `slug` | string | Tag slug |
  | ↳ `color` | string | Tag color |
  | ↳ `name` | string | Tag name |
  | ↳ `secretMetadata` | array | Custom metadata key-value pairs |
  | ↳ `key` | string | Metadata key |
  | ↳ `value` | string | Metadata value |
  | ↳ `isEncrypted` | boolean | Whether the metadata value is encrypted |
  | ↳ `actor` | object | Identity that last modified the secret |
  | ↳ `actorId` | string | Actor ID |
  | ↳ `actorType` | string | Actor type |
  | ↳ `name` | string | Actor name |
  | ↳ `membershipId` | string | Membership ID |
  | ↳ `groupId` | string | Group ID |
  | ↳ `createdAt` | string | Creation timestamp |
  | ↳ `updatedAt` | string | Last update timestamp |
</ReferenceDetails>

### Infisical Create Secret [#infisical-create-secret]

Create a new secret in a project environment.

<ReferenceDetails>
  #### Input [#input-2]

  | Parameter | Type | Required | Description |
  | - | - | - | - |
  | `apiKey` | string | Yes | Infisical API token |
  | `baseUrl` | string | No | Infisical instance URL (default: "[https://us.infisical.com](https://us.infisical.com)"). Use "[https://eu.infisical.com](https://eu.infisical.com)" for EU Cloud or your self-hosted URL. |
  | `projectId` | string | Yes | The ID of the project |
  | `environment` | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
  | `secretName` | string | Yes | The name of the secret to create |
  | `secretValue` | string | Yes | The value of the secret |
  | `secretPath` | string | No | The path for the secret (default: "/") |
  | `secretComment` | string | No | A comment for the secret |
  | `type` | string | No | Secret type: "shared" or "personal" (default: "shared") |
  | `tagIds` | string | No | Comma-separated tag IDs to attach to the secret |

  #### Output [#output-2]

  | Parameter | Type | Description |
  | - | - | - |
  | `secret` | object | The created secret |
  | ↳ `id` | string | Secret ID |
  | ↳ `workspace` | string | Workspace/project ID |
  | ↳ `secretKey` | string | Secret name/key |
  | ↳ `secretValue` | string | Secret value |
  | ↳ `secretComment` | string | Secret comment |
  | ↳ `secretPath` | string | Secret path |
  | ↳ `version` | number | Secret version |
  | ↳ `type` | string | Secret type (shared or personal) |
  | ↳ `environment` | string | Environment slug |
  | ↳ `secretValueHidden` | boolean | Whether the secret value was hidden in the response |
  | ↳ `isRotatedSecret` | boolean | Whether the secret is managed by secret rotation |
  | ↳ `rotationId` | string | Secret rotation ID |
  | ↳ `secretReminderNote` | string | Rotation reminder note |
  | ↳ `secretReminderRepeatDays` | number | Rotation reminder interval in days |
  | ↳ `skipMultilineEncoding` | boolean | Whether multiline encoding is skipped for this secret |
  | ↳ `tags` | array | Tags attached to the secret |
  | ↳ `id` | string | Tag ID |
  | ↳ `slug` | string | Tag slug |
  | ↳ `color` | string | Tag color |
  | ↳ `name` | string | Tag name |
  | ↳ `secretMetadata` | array | Custom metadata key-value pairs |
  | ↳ `key` | string | Metadata key |
  | ↳ `value` | string | Metadata value |
  | ↳ `isEncrypted` | boolean | Whether the metadata value is encrypted |
  | ↳ `actor` | object | Identity that last modified the secret |
  | ↳ `actorId` | string | Actor ID |
  | ↳ `actorType` | string | Actor type |
  | ↳ `name` | string | Actor name |
  | ↳ `membershipId` | string | Membership ID |
  | ↳ `groupId` | string | Group ID |
  | ↳ `createdAt` | string | Creation timestamp |
  | ↳ `updatedAt` | string | Last update timestamp |
</ReferenceDetails>

### Infisical Update Secret [#infisical-update-secret]

Update an existing secret in a project environment.

<ReferenceDetails>
  #### Input [#input-3]

  | Parameter | Type | Required | Description |
  | - | - | - | - |
  | `apiKey` | string | Yes | Infisical API token |
  | `baseUrl` | string | No | Infisical instance URL (default: "[https://us.infisical.com](https://us.infisical.com)"). Use "[https://eu.infisical.com](https://eu.infisical.com)" for EU Cloud or your self-hosted URL. |
  | `projectId` | string | Yes | The ID of the project |
  | `environment` | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
  | `secretName` | string | Yes | The name of the secret to update |
  | `secretValue` | string | No | The new value for the secret |
  | `secretPath` | string | No | The path of the secret (default: "/") |
  | `secretComment` | string | No | A comment for the secret |
  | `newSecretName` | string | No | New name for the secret (to rename it) |
  | `type` | string | No | Secret type: "shared" or "personal" (default: "shared") |
  | `tagIds` | string | No | Comma-separated tag IDs to set on the secret |

  #### Output [#output-3]

  | Parameter | Type | Description |
  | - | - | - |
  | `secret` | object | The updated secret |
  | ↳ `id` | string | Secret ID |
  | ↳ `workspace` | string | Workspace/project ID |
  | ↳ `secretKey` | string | Secret name/key |
  | ↳ `secretValue` | string | Secret value |
  | ↳ `secretComment` | string | Secret comment |
  | ↳ `secretPath` | string | Secret path |
  | ↳ `version` | number | Secret version |
  | ↳ `type` | string | Secret type (shared or personal) |
  | ↳ `environment` | string | Environment slug |
  | ↳ `secretValueHidden` | boolean | Whether the secret value was hidden in the response |
  | ↳ `isRotatedSecret` | boolean | Whether the secret is managed by secret rotation |
  | ↳ `rotationId` | string | Secret rotation ID |
  | ↳ `secretReminderNote` | string | Rotation reminder note |
  | ↳ `secretReminderRepeatDays` | number | Rotation reminder interval in days |
  | ↳ `skipMultilineEncoding` | boolean | Whether multiline encoding is skipped for this secret |
  | ↳ `tags` | array | Tags attached to the secret |
  | ↳ `id` | string | Tag ID |
  | ↳ `slug` | string | Tag slug |
  | ↳ `color` | string | Tag color |
  | ↳ `name` | string | Tag name |
  | ↳ `secretMetadata` | array | Custom metadata key-value pairs |
  | ↳ `key` | string | Metadata key |
  | ↳ `value` | string | Metadata value |
  | ↳ `isEncrypted` | boolean | Whether the metadata value is encrypted |
  | ↳ `actor` | object | Identity that last modified the secret |
  | ↳ `actorId` | string | Actor ID |
  | ↳ `actorType` | string | Actor type |
  | ↳ `name` | string | Actor name |
  | ↳ `membershipId` | string | Membership ID |
  | ↳ `groupId` | string | Group ID |
  | ↳ `createdAt` | string | Creation timestamp |
  | ↳ `updatedAt` | string | Last update timestamp |
</ReferenceDetails>

### Infisical Delete Secret [#infisical-delete-secret]

Delete a secret from a project environment.

<ReferenceDetails>
  #### Input [#input-4]

  | Parameter | Type | Required | Description |
  | - | - | - | - |
  | `apiKey` | string | Yes | Infisical API token |
  | `baseUrl` | string | No | Infisical instance URL (default: "[https://us.infisical.com](https://us.infisical.com)"). Use "[https://eu.infisical.com](https://eu.infisical.com)" for EU Cloud or your self-hosted URL. |
  | `projectId` | string | Yes | The ID of the project |
  | `environment` | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
  | `secretName` | string | Yes | The name of the secret to delete |
  | `secretPath` | string | No | The path of the secret (default: "/") |
  | `type` | string | No | Secret type: "shared" or "personal" (default: "shared") |

  #### Output [#output-4]

  | Parameter | Type | Description |
  | - | - | - |
  | `secret` | object | The deleted secret |
  | ↳ `id` | string | Secret ID |
  | ↳ `workspace` | string | Workspace/project ID |
  | ↳ `secretKey` | string | Secret name/key |
  | ↳ `secretValue` | string | Secret value |
  | ↳ `secretComment` | string | Secret comment |
  | ↳ `secretPath` | string | Secret path |
  | ↳ `version` | number | Secret version |
  | ↳ `type` | string | Secret type (shared or personal) |
  | ↳ `environment` | string | Environment slug |
  | ↳ `secretValueHidden` | boolean | Whether the secret value was hidden in the response |
  | ↳ `isRotatedSecret` | boolean | Whether the secret is managed by secret rotation |
  | ↳ `rotationId` | string | Secret rotation ID |
  | ↳ `secretReminderNote` | string | Rotation reminder note |
  | ↳ `secretReminderRepeatDays` | number | Rotation reminder interval in days |
  | ↳ `skipMultilineEncoding` | boolean | Whether multiline encoding is skipped for this secret |
  | ↳ `tags` | array | Tags attached to the secret |
  | ↳ `id` | string | Tag ID |
  | ↳ `slug` | string | Tag slug |
  | ↳ `color` | string | Tag color |
  | ↳ `name` | string | Tag name |
  | ↳ `secretMetadata` | array | Custom metadata key-value pairs |
  | ↳ `key` | string | Metadata key |
  | ↳ `value` | string | Metadata value |
  | ↳ `isEncrypted` | boolean | Whether the metadata value is encrypted |
  | ↳ `actor` | object | Identity that last modified the secret |
  | ↳ `actorId` | string | Actor ID |
  | ↳ `actorType` | string | Actor type |
  | ↳ `name` | string | Actor name |
  | ↳ `membershipId` | string | Membership ID |
  | ↳ `groupId` | string | Group ID |
  | ↳ `createdAt` | string | Creation timestamp |
  | ↳ `updatedAt` | string | Last update timestamp |
</ReferenceDetails>