Infisical MCP Server

Official

Integrate with Infisical APIs through function calling to manage secrets and projects.

How to install ↓ Compare GitHub source repository ↗

Category: Dev Tools #295 of 438
Stars: ★ 66 Popular
Transport: stdio (local process)
Runtime: Node.js
Credentials: API key / credential required
License: Apache-2.0
Last commit: 32 days ago
Tools: 10

46FMRS · D

The official Infisical MCP server provides a comprehensive set of secret management tools, suitable for users looking to integrate secret management into AI assistant workflows.

Strongest · Setup experience 10/20 Weakest · Reliability 6/20

Reliability

6/20

Security and permissions

10/20

Maintenance

10/20

Documentation

10/20

Setup experience

10/20

Why each score

Reliability 6/20: No unit or integration tests are provided in the repository, and there is no visible CI workflow (e.g., GitHub Actions) to verify server behavior. The README describes a list of tools, but the actual implementation cannot be confirmed to match the declarations. Although source code may exist, no verifiable execution evidence is provided in this static review, so reliability score is low.
Security and permissions 10/20: The project uses environment variables for authentication, and no real tokens are present in the README. Tools include create, delete, update secrets, etc., but no confirmation mechanism is mentioned. Since dynamic analysis was not possible, security risks cannot be fully ruled out, but no obvious malicious behavior or credential leakage was found. Hence, a medium score is given, noting potential side effects of operations.
Maintenance 10/20: The repository has 56 stars, 18 open issues, and is not archived. The README provides clear setup and debugging instructions. License is Apache-2.0. However, evidence on release frequency, commit activity, and dependency updates is insufficient, so score is moderate.
Documentation 10/20: The README provides detailed installation, environment variables, tool list, and debugging instructions, along with client configuration examples. But it lacks comprehensive documentation on tool parameters, limitations, costs, and troubleshooting. Nevertheless, the documentation is generally usable, so score is good.
Setup experience 10/20: The README provides clear steps for using npx and client configuration. Examples for two authentication methods (universal auth and access token) are provided. Since no actual execution verification is seen and CI/test evidence is missing, the score is limited. However, setup steps are clear, so score is good.

Static review · not runListed 2026-08-07

Read the FMRS scoring method →

Fit and risk

What it can accessUses the networkChanges third-party account data

Best for

Teams using Infisical for secret management
Developers wanting to manage secrets and projects within MCP clients like Claude Desktop

Not for

Users not wanting to rely on the Infisical platform
Scenarios needing advanced permission management or audit features (not mentioned)

Required permissions

Requires valid Infisical authentication credentials (universal auth or access token)
Needs permission to access Infisical API

Risks and side effects

Credential leakage: sensitive environment variables could be exposed
Accidental deletion or modification of secrets may cause production incidents

Setup

Before you start

Runtime：Node.js

INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET requiredsecret

INFISICAL_TOKEN optionalsecret

Other optional settings (3)

INFISICAL_AUTH_METHOD optional

INFISICAL_UNIVERSAL_AUTH_CLIENT_ID optional

INFISICAL_HOST_URL optional

Set required environment variables (e.g., INFISICAL_AUTH_METHOD, client ID/secret or access token).
Run the server with npx: npx -y @infisical/mcp
For Claude Desktop, configure in claude_desktop_config.json.

claude_desktop_config.json

{
  "mcpServers": {
    "infisical": {
      "command": "npx",
      "args": ["-y", "@infisical/mcp"],
      "env": {
        "INFISICAL_HOST_URL": "https://<custom-host-url>.com",
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret>"
      }
    }
  }
}

Shown for Claude Desktop. Other clients may use a different file or key (VS Code uses "servers") — the configurator below converts it.

.vscode/mcp.json

{
  "servers": {
    "infisical": {
      "command": "npx",
      "args": [
        "-y",
        "@infisical/mcp"
      ],
      "env": {
        "INFISICAL_HOST_URL": "https://<custom-host-url>.com",
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret>"
      }
    }
  }
}

Goes in your project's .vscode/mcp.json (VS Code uses a "servers" key).

Terminal

claude mcp add infisical -e 'INFISICAL_HOST_URL=https://<custom-host-url>.com' -e 'INFISICAL_UNIVERSAL_AUTH_CLIENT_ID=<machine-identity-universal-auth-client-id>' -e 'INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET=<machine-identity-universal-auth-client-secret>' -- npx -y @infisical/mcp

Run it in a terminal; replace any <…> placeholders with your own values first.

Generate and validate client config

Check that it works

Start the client and check that tools like list-projects and get-secret appear in the tool list; running list-projects and seeing your projects returned confirms the connection works.

Troubleshooting

Verify environment variables are correctly set
Use MCP Inspector to debug the server
Check network connectivity and host URL reachability

Things to try

Once connected, you can ask your AI assistant things like:

List all my Infisical projects
Create a new secret named API_KEY in the default project
Get the value of the DATABASE_URL secret in the staging environment
Delete the secret named OLD_TOKEN

Tools 10

create-secret writes

Create a new secret

delete-secret destructive

Delete a secret

update-secret writes

Update a secret

list-secrets read-only

Lists all secrets

get-secret read-only

Get a single secret

create-project writes

Create a new project

create-environment writes

Create a new environment

create-folder writes

Create a new folder

Show 2 more tools

invite-members-to-project writes

Invite one or more members to a project

list-projects read-only

List all projects

Use cases

Integrate secret management into AI assistant workflows

Operate Infisical API via natural language

Automate project management tasks

Supported clients

Claude Desktop

Listed from the project's documentation, not tested by this site.

Overview

The official Infisical MCP server provides tools to create, delete, update, and retrieve secrets, as well as manage projects, environments, and folders. Supports universal auth and access token authentication, with optional custom host URL.

Similar servers

Context7 80 · B

Upstash's official server providing up-to-date third-party library docs for AI coding assistants

★ 62.9k · Tools 2 Compare with this →

NPM Sentinel MCP Server 79 · B

AI-powered NPM package analysis MCP server

★ 18 · Tools 19 Compare with this →

MartinLoop MCP Server 79 · B

An independent control layer that gives AI coding agents budgets, brakes, and receipts

★ 410 Compare with this →

GitHub MCP Server 76 · B

GitHub's official MCP server for managing repos, issues, PRs, and workflows via natural language

★ 33.5k · Tools 15 Compare with this →

Compare with other MCP servers

Source revision d19e3ca244d0 Data synced 2026-10-12 Read the FMRS scoring method