Infisical (Secrets Management) MCP server

Provides a secure bridge to the Infisical secrets management platform, enabling operations like creating, updating, and retrieving secrets without exposing credentials directly
Back to servers
Setup instructions
Provider
Infisical
Release date
Apr 12, 2025
Language
TypeScript
Package
Stats
516 downloads
25 stars

The Infisical Model Context Protocol (MCP) server enables integration with Infisical APIs through function calling. This implementation allows you to interact with Infisical's secret management functionality using various tools that follow the MCP specification.

Installation

Setting Up Environment Variables

Before using the MCP server, configure the following environment variables for authentication:

  • INFISICAL_UNIVERSAL_AUTH_CLIENT_ID: Your Machine Identity universal auth client ID
  • INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET: Your Machine Identity universal auth client secret
  • INFISICAL_HOST_URL: (Optional) Custom host URL if you're self-hosting Infisical or using dedicated infrastructure. Defaults to https://app.infisical.com

Running the Server

To run the Infisical MCP server using npx:

npx -y @infisical/mcp

Integration with Claude Desktop

To use the Infisical MCP server with Claude Desktop, add the following configuration to your claude_desktop_config.json:

{
  "mcpServers": {
    "infisical": {
      "command": "npx",
      "args": ["-y", "@infisical/mcp"],
      "env": {
        "INFISICAL_HOST_URL": "https://<custom-host-url>.com", // Optional
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
        "INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret"
      }
    }
  }
}

Available Tools

The Infisical MCP server provides the following tools:

Secret Management

  • create-secret: Create a new secret
  • delete-secret: Delete a secret
  • update-secret: Update a secret
  • list-secrets: List all secrets
  • get-secret: Get a single secret

Project Management

  • create-project: Create a new project
  • create-environment: Create a new environment
  • create-folder: Create a new folder
  • invite-members-to-project: Invite one or more members to a project

Debugging

You can debug the server using the MCP Inspector tool:

  1. Build the server:

    npm run build
    
  2. Start the MCP Inspector and server:

    npx @modelcontextprotocol/inspector node dist/index.js
    
  3. Set the required environment variables as described above

  4. Open the MCP Inspector UI in your browser and click Connect

  5. View all available tools and test them individually

How to install this MCP server

For Claude Code

To add this MCP server to Claude Code, run this command in your terminal:

claude mcp add-json "infisical" '{"command":"npx","args":["-y","@infisical/mcp"],"env":{"INFISICAL_HOST_URL":"https://<custom-host-url>.com","INFISICAL_UNIVERSAL_AUTH_CLIENT_ID":"<machine-identity-universal-auth-client-id>","INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET":"<machine-identity-universal-auth-client-secret>"}}'

See the official Claude Code MCP documentation for more details.

For Cursor

There are two ways to add an MCP server to Cursor. The most common way is to add the server globally in the ~/.cursor/mcp.json file so that it is available in all of your projects.

If you only need the server in a single project, you can add it to the project instead by creating or adding it to the .cursor/mcp.json file.

Adding an MCP server to Cursor globally

To add a global MCP server go to Cursor Settings > Tools & Integrations and click "New MCP Server".

When you click that button the ~/.cursor/mcp.json file will be opened and you can add your server like this:

{
    "mcpServers": {
        "infisical": {
            "command": "npx",
            "args": [
                "-y",
                "@infisical/mcp"
            ],
            "env": {
                "INFISICAL_HOST_URL": "https://<custom-host-url>.com",
                "INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
                "INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret>"
            }
        }
    }
}

Adding an MCP server to a project

To add an MCP server to a project you can create a new .cursor/mcp.json file or add it to the existing one. This will look exactly the same as the global MCP server example above.

How to use the MCP server

Once the server is installed, you might need to head back to Settings > MCP and click the refresh button.

The Cursor agent will then be able to see the available tools the added MCP server has available and will call them when it needs to.

You can also explicitly ask the agent to use the tool by mentioning the tool name and describing what the function does.

For Claude Desktop

To add this MCP server to Claude Desktop:

1. Find your configuration file:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows: %APPDATA%\Claude\claude_desktop_config.json
  • Linux: ~/.config/Claude/claude_desktop_config.json

2. Add this to your configuration file:

{
    "mcpServers": {
        "infisical": {
            "command": "npx",
            "args": [
                "-y",
                "@infisical/mcp"
            ],
            "env": {
                "INFISICAL_HOST_URL": "https://<custom-host-url>.com",
                "INFISICAL_UNIVERSAL_AUTH_CLIENT_ID": "<machine-identity-universal-auth-client-id>",
                "INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET": "<machine-identity-universal-auth-client-secret>"
            }
        }
    }
}

3. Restart Claude Desktop for the changes to take effect

Want to 10x your AI skills?

Get a free account and learn to code + market your apps using AI (with or without vibes!).

Nah, maybe later