Best for
- Teams using Infisical for secret management
- Developers wanting to manage secrets and projects within MCP clients like Claude Desktop
I
Infisical MCP Server
Official
Integrate with Infisical APIs through function calling to manage secrets and projects.
GitHub source repository ↗
46FMRS · D
The official Infisical MCP server provides a comprehensive set of secret management tools, suitable for users looking to integrate secret management into AI assistant workflows.
The official Infisical MCP server provides tools to create, delete, update, and retrieve secrets, as well as manage projects, environments, and folders. Supports universal auth and access token authentication, with optional custom host URL.
Tools
create-secret
Create a new secret
delete-secret
Delete a secret
update-secret
Update a secret
list-secrets
Lists all secrets
get-secret
Get a single secret
create-project
Create a new project
create-environment
Create a new environment
create-folder
Create a new folder
invite-members-to-project
Invite one or more members to a project
list-projects
List all projects
Setup
- Set required environment variables (e.g., INFISICAL_AUTH_METHOD, client ID/secret or access token).
- Run the server with npx: npx -y @infisical/mcp
- For Claude Desktop, configure in claude_desktop_config.json.
claude_desktop_config.json
{
"mcpServers": {
"infisical": {
"command": "npx",
"args": ["-y", "@infisical/mcp"],
"env": {
"INFISICAL_HOST_URL": "https://<custom-host-url>.com",
"INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
"INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret>"
}
}
}
}
Fit and risk
Not for
- Users not wanting to rely on the Infisical platform
- Scenarios needing advanced permission management or audit features (not mentioned)
Required permissions
- Requires valid Infisical authentication credentials (universal auth or access token)
- Needs permission to access Infisical API
Risks and side effects
- Credential leakage: sensitive environment variables could be exposed
- Accidental deletion or modification of secrets may cause production incidents
Troubleshooting
- Verify environment variables are correctly set
- Use MCP Inspector to debug the server
- Check network connectivity and host URL reachability
Use cases
Integrate secret management into AI assistant workflows
Operate Infisical API via natural language
Automate project management tasks
Supported clients
Claude DesktopFull support