Skip to main content
Watch: I Built an AI App Without Leaving Databricks

Auth and security - official Infisical server

Infisical MCP server

Infisical's official local stdio MCP server for managing secrets, projects, environments and folders through the Infisical API. Works with Infisical Cloud or self-hosted instances via a custom host URL. It runs locally from @infisical/mcp (npm) with API key auth.

Last verified 10 tools1 source

Install

Generic

JSON
{
  "mcpServers": {
    "infisical": {
      "command": "npx",
      "args": ["-y", "@infisical/mcp"],
      "env": {
        "INFISICAL_HOST_URL": "https://<custom-host-url>.com",
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret>"
      }
    }
  }
}

Tools

create-secret
Create a new secret
delete-secret
Delete a secret
update-secret
Update a secret
list-secrets
Lists all secrets
get-secret
Get a single secret
create-project
Create a new project
create-environment
Create a new environment
create-folder
Create a new folder
invite-members-to-project
Invite one or more members to a project
list-projects
List all projects

As documented on October 17, 2026. A running server reports its current list through tools/list.

Notes and caveats

  • Auth via machine identity universal auth (client ID and secret, default) or an access token (personal or machine identity) with INFISICAL_AUTH_METHOD=access-token.
  • Optional INFISICAL_ENABLED_TOOLS allowlist and INFISICAL_MASK_SECRET_VALUES to keep secret values out of model context.
  • Package is still at 0.0.x (0.0.24 published 2026-09-10 per npm); the README gives no status label and only a Claude Desktop config.
  • Not documented on the main docs site, which instead points AI tools to the separate documentation MCP server.

More MCP servers for auth and security

Related reading

FAQ

What does the Infisical MCP server do?

Infisical's official local stdio MCP server for managing secrets, projects, environments and folders through the Infisical API. Works with Infisical Cloud or self-hosted instances via a custom host URL. The vendor documents 10 tools, including create-secret, delete-secret, update-secret and list-secrets.

How do I add the Infisical MCP server to an MCP client?

Infisical documents a Generic config; copy it from the Generic section of this page.

Does the Infisical MCP server need authentication?

Yes, API key. Transport: stdio. Status: Unlabelled, last checked October 17, 2026.

Sources

Last verified against 1 Infisical page, then re-checked independently.

Newsletter

New MCP servers, the week they ship

One email per week. New official MCP servers, the coding tools that support them and how developers wire them up.