Use Infisical to list, read, create, update, or delete secrets in a project environment. Configure the API key, project ID, environment slug, and any secret path required by the selected operation.
Use the block
List, get, create, update, and delete secrets across project environments.
Actions
Infisical List Secrets
List all secrets in a project environment. Returns secret keys, values, comments, tags, and metadata.
Inputs and outputs
Input
| Parameter | Type | Required | Description |
|---|---|---|---|
apiKey | string | Yes | Infisical API token |
baseUrl | string | No | Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. |
projectId | string | Yes | The ID of the project to list secrets from |
environment | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
secretPath | string | No | The path of the secrets (default: "/") |
recursive | boolean | No | Whether to fetch secrets recursively from subdirectories |
expandSecretReferences | boolean | No | Whether to expand secret references (default: true) |
viewSecretValue | boolean | No | Whether to include secret values in the response (default: true) |
includeImports | boolean | No | Whether to include imported secrets (default: true) |
tagSlugs | string | No | Comma-separated tag slugs to filter secrets by |
Output
| Parameter | Type | Description |
|---|---|---|
secrets | array | Array of secrets |
↳ id | string | Secret ID |
↳ workspace | string | Workspace/project ID |
↳ secretKey | string | Secret name/key |
↳ secretValue | string | Secret value |
↳ secretComment | string | Secret comment |
↳ secretPath | string | Secret path |
↳ version | number | Secret version |
↳ type | string | Secret type (shared or personal) |
↳ environment | string | Environment slug |
↳ secretValueHidden | boolean | Whether the secret value was hidden in the response |
↳ isRotatedSecret | boolean | Whether the secret is managed by secret rotation |
↳ rotationId | string | Secret rotation ID |
↳ secretReminderNote | string | Rotation reminder note |
↳ secretReminderRepeatDays | number | Rotation reminder interval in days |
↳ skipMultilineEncoding | boolean | Whether multiline encoding is skipped for this secret |
↳ tags | array | Tags attached to the secret |
↳ id | string | Tag ID |
↳ slug | string | Tag slug |
↳ color | string | Tag color |
↳ name | string | Tag name |
↳ secretMetadata | array | Custom metadata key-value pairs |
↳ key | string | Metadata key |
↳ value | string | Metadata value |
↳ isEncrypted | boolean | Whether the metadata value is encrypted |
↳ actor | object | Identity that last modified the secret |
↳ actorId | string | Actor ID |
↳ actorType | string | Actor type |
↳ name | string | Actor name |
↳ membershipId | string | Membership ID |
↳ groupId | string | Group ID |
↳ createdAt | string | Creation timestamp |
↳ updatedAt | string | Last update timestamp |
count | number | Total number of secrets returned |
Infisical Get Secret
Retrieve a single secret by name from a project environment.
Inputs and outputs
Input
| Parameter | Type | Required | Description |
|---|---|---|---|
apiKey | string | Yes | Infisical API token |
baseUrl | string | No | Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. |
projectId | string | Yes | The ID of the project |
environment | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
secretName | string | Yes | The name of the secret to retrieve |
secretPath | string | No | The path of the secret (default: "/") |
version | number | No | Specific version of the secret to retrieve |
type | string | No | Secret type: "shared" or "personal" (default: "shared") |
viewSecretValue | boolean | No | Whether to include the secret value in the response (default: true) |
expandSecretReferences | boolean | No | Whether to expand secret references (default: true) |
Output
| Parameter | Type | Description |
|---|---|---|
secret | object | The retrieved secret |
↳ id | string | Secret ID |
↳ workspace | string | Workspace/project ID |
↳ secretKey | string | Secret name/key |
↳ secretValue | string | Secret value |
↳ secretComment | string | Secret comment |
↳ secretPath | string | Secret path |
↳ version | number | Secret version |
↳ type | string | Secret type (shared or personal) |
↳ environment | string | Environment slug |
↳ secretValueHidden | boolean | Whether the secret value was hidden in the response |
↳ isRotatedSecret | boolean | Whether the secret is managed by secret rotation |
↳ rotationId | string | Secret rotation ID |
↳ secretReminderNote | string | Rotation reminder note |
↳ secretReminderRepeatDays | number | Rotation reminder interval in days |
↳ skipMultilineEncoding | boolean | Whether multiline encoding is skipped for this secret |
↳ tags | array | Tags attached to the secret |
↳ id | string | Tag ID |
↳ slug | string | Tag slug |
↳ color | string | Tag color |
↳ name | string | Tag name |
↳ secretMetadata | array | Custom metadata key-value pairs |
↳ key | string | Metadata key |
↳ value | string | Metadata value |
↳ isEncrypted | boolean | Whether the metadata value is encrypted |
↳ actor | object | Identity that last modified the secret |
↳ actorId | string | Actor ID |
↳ actorType | string | Actor type |
↳ name | string | Actor name |
↳ membershipId | string | Membership ID |
↳ groupId | string | Group ID |
↳ createdAt | string | Creation timestamp |
↳ updatedAt | string | Last update timestamp |
Infisical Create Secret
Create a new secret in a project environment.
Inputs and outputs
Input
| Parameter | Type | Required | Description |
|---|---|---|---|
apiKey | string | Yes | Infisical API token |
baseUrl | string | No | Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. |
projectId | string | Yes | The ID of the project |
environment | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
secretName | string | Yes | The name of the secret to create |
secretValue | string | Yes | The value of the secret |
secretPath | string | No | The path for the secret (default: "/") |
secretComment | string | No | A comment for the secret |
type | string | No | Secret type: "shared" or "personal" (default: "shared") |
tagIds | string | No | Comma-separated tag IDs to attach to the secret |
Output
| Parameter | Type | Description |
|---|---|---|
secret | object | The created secret |
↳ id | string | Secret ID |
↳ workspace | string | Workspace/project ID |
↳ secretKey | string | Secret name/key |
↳ secretValue | string | Secret value |
↳ secretComment | string | Secret comment |
↳ secretPath | string | Secret path |
↳ version | number | Secret version |
↳ type | string | Secret type (shared or personal) |
↳ environment | string | Environment slug |
↳ secretValueHidden | boolean | Whether the secret value was hidden in the response |
↳ isRotatedSecret | boolean | Whether the secret is managed by secret rotation |
↳ rotationId | string | Secret rotation ID |
↳ secretReminderNote | string | Rotation reminder note |
↳ secretReminderRepeatDays | number | Rotation reminder interval in days |
↳ skipMultilineEncoding | boolean | Whether multiline encoding is skipped for this secret |
↳ tags | array | Tags attached to the secret |
↳ id | string | Tag ID |
↳ slug | string | Tag slug |
↳ color | string | Tag color |
↳ name | string | Tag name |
↳ secretMetadata | array | Custom metadata key-value pairs |
↳ key | string | Metadata key |
↳ value | string | Metadata value |
↳ isEncrypted | boolean | Whether the metadata value is encrypted |
↳ actor | object | Identity that last modified the secret |
↳ actorId | string | Actor ID |
↳ actorType | string | Actor type |
↳ name | string | Actor name |
↳ membershipId | string | Membership ID |
↳ groupId | string | Group ID |
↳ createdAt | string | Creation timestamp |
↳ updatedAt | string | Last update timestamp |
Infisical Update Secret
Update an existing secret in a project environment.
Inputs and outputs
Input
| Parameter | Type | Required | Description |
|---|---|---|---|
apiKey | string | Yes | Infisical API token |
baseUrl | string | No | Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. |
projectId | string | Yes | The ID of the project |
environment | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
secretName | string | Yes | The name of the secret to update |
secretValue | string | No | The new value for the secret |
secretPath | string | No | The path of the secret (default: "/") |
secretComment | string | No | A comment for the secret |
newSecretName | string | No | New name for the secret (to rename it) |
type | string | No | Secret type: "shared" or "personal" (default: "shared") |
tagIds | string | No | Comma-separated tag IDs to set on the secret |
Output
| Parameter | Type | Description |
|---|---|---|
secret | object | The updated secret |
↳ id | string | Secret ID |
↳ workspace | string | Workspace/project ID |
↳ secretKey | string | Secret name/key |
↳ secretValue | string | Secret value |
↳ secretComment | string | Secret comment |
↳ secretPath | string | Secret path |
↳ version | number | Secret version |
↳ type | string | Secret type (shared or personal) |
↳ environment | string | Environment slug |
↳ secretValueHidden | boolean | Whether the secret value was hidden in the response |
↳ isRotatedSecret | boolean | Whether the secret is managed by secret rotation |
↳ rotationId | string | Secret rotation ID |
↳ secretReminderNote | string | Rotation reminder note |
↳ secretReminderRepeatDays | number | Rotation reminder interval in days |
↳ skipMultilineEncoding | boolean | Whether multiline encoding is skipped for this secret |
↳ tags | array | Tags attached to the secret |
↳ id | string | Tag ID |
↳ slug | string | Tag slug |
↳ color | string | Tag color |
↳ name | string | Tag name |
↳ secretMetadata | array | Custom metadata key-value pairs |
↳ key | string | Metadata key |
↳ value | string | Metadata value |
↳ isEncrypted | boolean | Whether the metadata value is encrypted |
↳ actor | object | Identity that last modified the secret |
↳ actorId | string | Actor ID |
↳ actorType | string | Actor type |
↳ name | string | Actor name |
↳ membershipId | string | Membership ID |
↳ groupId | string | Group ID |
↳ createdAt | string | Creation timestamp |
↳ updatedAt | string | Last update timestamp |
Infisical Delete Secret
Delete a secret from a project environment.
Inputs and outputs
Input
| Parameter | Type | Required | Description |
|---|---|---|---|
apiKey | string | Yes | Infisical API token |
baseUrl | string | No | Infisical instance URL (default: "https://us.infisical.com"). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. |
projectId | string | Yes | The ID of the project |
environment | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
secretName | string | Yes | The name of the secret to delete |
secretPath | string | No | The path of the secret (default: "/") |
type | string | No | Secret type: "shared" or "personal" (default: "shared") |
Output
| Parameter | Type | Description |
|---|---|---|
secret | object | The deleted secret |
↳ id | string | Secret ID |
↳ workspace | string | Workspace/project ID |
↳ secretKey | string | Secret name/key |
↳ secretValue | string | Secret value |
↳ secretComment | string | Secret comment |
↳ secretPath | string | Secret path |
↳ version | number | Secret version |
↳ type | string | Secret type (shared or personal) |
↳ environment | string | Environment slug |
↳ secretValueHidden | boolean | Whether the secret value was hidden in the response |
↳ isRotatedSecret | boolean | Whether the secret is managed by secret rotation |
↳ rotationId | string | Secret rotation ID |
↳ secretReminderNote | string | Rotation reminder note |
↳ secretReminderRepeatDays | number | Rotation reminder interval in days |
↳ skipMultilineEncoding | boolean | Whether multiline encoding is skipped for this secret |
↳ tags | array | Tags attached to the secret |
↳ id | string | Tag ID |
↳ slug | string | Tag slug |
↳ color | string | Tag color |
↳ name | string | Tag name |
↳ secretMetadata | array | Custom metadata key-value pairs |
↳ key | string | Metadata key |
↳ value | string | Metadata value |
↳ isEncrypted | boolean | Whether the metadata value is encrypted |
↳ actor | object | Identity that last modified the secret |
↳ actorId | string | Actor ID |
↳ actorType | string | Actor type |
↳ name | string | Actor name |
↳ membershipId | string | Membership ID |
↳ groupId | string | Group ID |
↳ createdAt | string | Creation timestamp |
↳ updatedAt | string | Last update timestamp |