Infisical (Secrets Management)
About
Provides a secure bridge to the Infisical secrets management platform, enabling operations like creating, updating, and retrieving secrets without exposing credentials directly
Details
- Author
- infisical
- Repository
- Infisical/infisical-mcp-server
- GitHub stars
- 12
- Downloads
- 339
- License
- Apache License 2.0
- Categories
- Developer Tools, Security, Infrastructure, AI, Workplace, File Management, Project Management, Communication, Other
- Tags
- #integration
Jump to
- Create, read, update, and delete secrets
- List and retrieve individual secrets
- Create and list projects
- Create environments and folders
- Invite members to projects
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Infisical (Secrets Management)Command (node, npx, python, etc.)npxArguments-
Argument 1
-y -
Argument 2
@infisical/mcp
Environment-
INFISICAL_HOST_URL
https://<custom-host-url>.com -
INFISICAL_UNIVERSAL_AUTH_CLIENT_ID
<machine-identity-universal-auth-client-id> -
INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET
<machine-identity-universal-auth-client-secret>
Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
-
Argument 1
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
In order to use the MCP server, you must first set the environment variables required for authentication.
- INFISICAL_AUTH_METHOD: The authentication method to use. Supported values are universal-auth and access-token. Defaults to universal-auth.
- INFISICAL_UNIVERSAL_AUTH_CLIENT_ID: The Machine Identity universal auth client ID. Required when INFISICAL_AUTH_METHOD is universal-auth.
- INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET: The Machine Identity universal auth client secret. Required when INFISICAL_AUTH_METHOD is universal-auth.
- INFISICAL_TOKEN: An access token for authentication. This can be both a personal access token or a machine identity access token. Required when INFISICAL_AUTH_METHOD is access-token.
- INFISICAL_HOST_URL: Optionally set a custom host URL. This is useful if you're self-hosting Infisical or you're on dedicated infrastructure. Defaults to https://app.infisical.com.
To run the Infisical MCP server using npx, use the following command:
npx -y @infisical/mcp
Add the following to your claude_desktop_config.json. See here for more details.
create-secret
Create a new secret.
delete-secret
Delete a secret.
update-secret
Update a secret.
list-secrets
Lists all secrets.
get-secret
Get a single secret.
create-project
Create a new project.
create-environment
Create a new environment.
create-folder
Create a new folder.
invite-members-to-project
Invite one or more members to a project.
list-projects
List all projects.
| Tool | Description |
| --------------------------- | --------------------------------------- |
| create-secret | Create a new secret |
| delete-secret | Delete a secret |
| update-secret | Update a secret |
| list-secrets | Lists all secrets |
| get-secret | Get a single secret |
| create-project | Create a new project |
| create-environment | Create a new environment |
| create-folder | Create a new folder |
| invite-members-to-project | Invite one or more members to a project |
| list-projects | List all projects |
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"infisical (secrets management)": {
"env": {
"INFISICAL_HOST_URL": "https://<custom-host-url>.com",
"INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
"INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret>"
},
"args": [
"-y",
"@infisical/mcp"
],
"command": "npx"
}
}
}Linux
{
"env": {
"INFISICAL_HOST_URL": "https://<custom-host-url>.com",
"INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
"INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret>"
},
"args": [
"-y",
"@infisical/mcp"
],
"command": "npx"
}Macos
{
"env": {
"INFISICAL_HOST_URL": "https://<custom-host-url>.com",
"INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
"INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret>"
},
"args": [
"-y",
"@infisical/mcp"
],
"command": "npx"
}Windows
{
"env": {
"INFISICAL_HOST_URL": "https://<custom-host-url>.com",
"INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
"INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret>"
},
"args": [
"/c",
"npx",
"-y",
"@infisical/mcp"
],
"command": "cmd"
}Start MCP Inspector and server
npx @modelcontextprotocol/inspector node dist/index.js ```Instructions
1. Set the environment variables as described in the Environment Variables step.
2. Run the command to start the MCP Inspector.
3. Open the MCP Inspector UI in your browser and click Connect to start the MCP server.
4. You can see all the available tools and test them individually.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
