Infisical

Manage secrets with Infisical

Infisical is an open-source secrets management platform that helps teams centralize and manage application secrets, environment variables, and sensitive configuration data across their infrastructure. This integration brings Infisical's secrets management capabilities directly into Sim workflows.

With Infisical in Sim, you can:

  • List secrets: Retrieve all secrets from a project environment with filtering by path, tags, and recursive subdirectory support
  • Get a secret: Fetch a specific secret by name, with optional version pinning and secret reference expansion
  • Create secrets: Add new secrets to any project environment with support for comments, paths, and tag assignments
  • Update secrets: Modify existing secret values, comments, names, and tags
  • Delete secrets: Remove secrets from a project environment

In Sim, the Infisical integration enables your agents to programmatically manage secrets as part of automated workflows — for example, rotating credentials, syncing environment variables across environments, or auditing secret usage. Simply configure the Infisical block with your API key, select the operation, and provide the project ID and environment slug to get started.

Usage Instructions

Integrate Infisical into your workflow. List, get, create, update, and delete secrets across project environments.

Tools

infisical_list_secrets

List all secrets in a project environment. Returns secret keys, values, comments, tags, and metadata.

Input

ParameterTypeRequiredDescription
apiKeystringYesInfisical API token
baseUrlstringNoInfisical instance URL (default: "https://us.infisical.com"\). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
projectIdstringYesThe ID of the project to list secrets from
environmentstringYesThe environment slug (e.g., "dev", "staging", "prod")
secretPathstringNoThe path of the secrets (default: "/")
recursivebooleanNoWhether to fetch secrets recursively from subdirectories
expandSecretReferencesbooleanNoWhether to expand secret references (default: true)
viewSecretValuebooleanNoWhether to include secret values in the response (default: true)
includeImportsbooleanNoWhether to include imported secrets (default: true)
tagSlugsstringNoComma-separated tag slugs to filter secrets by

Output

ParameterTypeDescription
secretsarrayArray of secrets
idstringSecret ID
workspacestringWorkspace/project ID
secretKeystringSecret name/key
secretValuestringSecret value
secretCommentstringSecret comment
secretPathstringSecret path
versionnumberSecret version
typestringSecret type (shared or personal)
environmentstringEnvironment slug
tagsarrayTags attached to the secret
idstringTag ID
slugstringTag slug
colorstringTag color
namestringTag name
secretMetadataarrayCustom metadata key-value pairs
keystringMetadata key
valuestringMetadata value
createdAtstringCreation timestamp
updatedAtstringLast update timestamp
countnumberTotal number of secrets returned

infisical_get_secret

Retrieve a single secret by name from a project environment.

Input

ParameterTypeRequiredDescription
apiKeystringYesInfisical API token
baseUrlstringNoInfisical instance URL (default: "https://us.infisical.com"\). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
projectIdstringYesThe ID of the project
environmentstringYesThe environment slug (e.g., "dev", "staging", "prod")
secretNamestringYesThe name of the secret to retrieve
secretPathstringNoThe path of the secret (default: "/")
versionnumberNoSpecific version of the secret to retrieve
typestringNoSecret type: "shared" or "personal" (default: "shared")
viewSecretValuebooleanNoWhether to include the secret value in the response (default: true)
expandSecretReferencesbooleanNoWhether to expand secret references (default: true)

Output

ParameterTypeDescription
secretobjectThe retrieved secret
idstringSecret ID
workspacestringWorkspace/project ID
secretKeystringSecret name/key
secretValuestringSecret value
secretCommentstringSecret comment
secretPathstringSecret path
versionnumberSecret version
typestringSecret type (shared or personal)
environmentstringEnvironment slug
tagsarrayTags attached to the secret
idstringTag ID
slugstringTag slug
colorstringTag color
namestringTag name
secretMetadataarrayCustom metadata key-value pairs
keystringMetadata key
valuestringMetadata value
createdAtstringCreation timestamp
updatedAtstringLast update timestamp

infisical_create_secret

Create a new secret in a project environment.

Input

ParameterTypeRequiredDescription
apiKeystringYesInfisical API token
baseUrlstringNoInfisical instance URL (default: "https://us.infisical.com"\). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
projectIdstringYesThe ID of the project
environmentstringYesThe environment slug (e.g., "dev", "staging", "prod")
secretNamestringYesThe name of the secret to create
secretValuestringYesThe value of the secret
secretPathstringNoThe path for the secret (default: "/")
secretCommentstringNoA comment for the secret
typestringNoSecret type: "shared" or "personal" (default: "shared")
tagIdsstringNoComma-separated tag IDs to attach to the secret

Output

ParameterTypeDescription
secretobjectThe created secret
idstringSecret ID
workspacestringWorkspace/project ID
secretKeystringSecret name/key
secretValuestringSecret value
secretCommentstringSecret comment
secretPathstringSecret path
versionnumberSecret version
typestringSecret type (shared or personal)
environmentstringEnvironment slug
tagsarrayTags attached to the secret
idstringTag ID
slugstringTag slug
colorstringTag color
namestringTag name
secretMetadataarrayCustom metadata key-value pairs
keystringMetadata key
valuestringMetadata value
createdAtstringCreation timestamp
updatedAtstringLast update timestamp

infisical_update_secret

Update an existing secret in a project environment.

Input

ParameterTypeRequiredDescription
apiKeystringYesInfisical API token
baseUrlstringNoInfisical instance URL (default: "https://us.infisical.com"\). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
projectIdstringYesThe ID of the project
environmentstringYesThe environment slug (e.g., "dev", "staging", "prod")
secretNamestringYesThe name of the secret to update
secretValuestringNoThe new value for the secret
secretPathstringNoThe path of the secret (default: "/")
secretCommentstringNoA comment for the secret
newSecretNamestringNoNew name for the secret (to rename it)
typestringNoSecret type: "shared" or "personal" (default: "shared")
tagIdsstringNoComma-separated tag IDs to set on the secret

Output

ParameterTypeDescription
secretobjectThe updated secret
idstringSecret ID
workspacestringWorkspace/project ID
secretKeystringSecret name/key
secretValuestringSecret value
secretCommentstringSecret comment
secretPathstringSecret path
versionnumberSecret version
typestringSecret type (shared or personal)
environmentstringEnvironment slug
tagsarrayTags attached to the secret
idstringTag ID
slugstringTag slug
colorstringTag color
namestringTag name
secretMetadataarrayCustom metadata key-value pairs
keystringMetadata key
valuestringMetadata value
createdAtstringCreation timestamp
updatedAtstringLast update timestamp

infisical_delete_secret

Delete a secret from a project environment.

Input

ParameterTypeRequiredDescription
apiKeystringYesInfisical API token
baseUrlstringNoInfisical instance URL (default: "https://us.infisical.com"\). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL.
projectIdstringYesThe ID of the project
environmentstringYesThe environment slug (e.g., "dev", "staging", "prod")
secretNamestringYesThe name of the secret to delete
secretPathstringNoThe path of the secret (default: "/")
typestringNoSecret type: "shared" or "personal" (default: "shared")

Output

ParameterTypeDescription
secretobjectThe deleted secret
idstringSecret ID
workspacestringWorkspace/project ID
secretKeystringSecret name/key
secretValuestringSecret value
secretCommentstringSecret comment
secretPathstringSecret path
versionnumberSecret version
typestringSecret type (shared or personal)
environmentstringEnvironment slug
tagsarrayTags attached to the secret
idstringTag ID
slugstringTag slug
colorstringTag color
namestringTag name
secretMetadataarrayCustom metadata key-value pairs
keystringMetadata key
valuestringMetadata value
createdAtstringCreation timestamp
updatedAtstringLast update timestamp

On this page

Start building today
Trusted by over 100,000 builders.
The open-source platform to build AI agents and run your agentic workforce.
Get started