How to Use the Infisical MCP in Cline

Q: Can Cline delete my Infisical secrets?

Yes, Cline can invoke deletesecret if you authorize the action. Because deleting keys cannot be undone, you should review the agent's proposed plan in the VS Code sidebar before approving the execution.

Q: Does Cline support multi-environment setups with Infisical?

Yes, Cline uses the MCP Server to call listenvironments and detect your project's environments. This allows the agent to pull development keys for local testing, or staging keys when preparing a deployment branch.

Give Cline the power to fetch, write, and audit your Infisical secrets while it builds and tests your VS Code projects.

See Vinkius in Action

Works with every AI agent you already use

…and any MCP-compatible client

MCP Servers - Free for Subscribers

Connect Infisical MCP to Cline

Create your Vinkius account to connect Infisical to Cline and route execution through our secure gateway. The platform manages server hosting, runtime updates, and security layers. Configuration requires no manual server provisioning.

GDPR Free for Subscribers

Setup Infisical with Cline

Ask AI about this MCP

ChatGPT

Claude

Perplexity

End-to-end environment setup using Cline

Cline doesn't just write code; it configures your local VS Code runtime using actual Infisical secret data. When you tell the agent to set up a new database connection, it queries your vault to pull the exact credentials needed for your local environment files. The Cline agent runs `list_secrets` to identify available keys, pulls the values with `get_secret`, and writes them directly to your VS Code project's `.env` file. Because this MCP Server exposes direct data access, Cline handles the entire setup pipeline without you copy-pasting sensitive strings from your Infisical dashboard.

Automated secret provisioning during code generation

Adding a new integration often requires manual secret creation in your Infisical vault. Cline bypasses this manual step by provisioning new keys as it writes the integration code, ensuring your configuration stays in sync with your codebase. When writing a new service in VS Code, Cline calls `create_secret` to save the new API keys in your Infisical project. If a key already exists, the agent uses `update_secret` to refresh the value, avoiding manual entry errors entirely.

Direct compliance auditing within VS Code

Verifying your team's security posture usually means running manual audits. Cline simplifies this by querying Infisical security configurations and access logs directly from your VS Code sidebar, keeping compliance checks close to your code. The Cline agent executes `list_audit_logs` to check recent modifications to your keys, and queries `list_identities` to review machine access. It can also pull general workspace configuration details using `get_project_info` to verify you are targeting the correct project.

Setup guide

Set up Infisical MCP in Cline

Prerequisites

VS Code with Cline extension installed
Active Vinkius subscription with a valid endpoint token

1

Open Cline MCP settings

Click the Cline icon in the VS Code sidebar to open the Cline panel. Then click the MCP Servers icon (server stack) at the top-right corner of the panel.
2

Add a remote server

Click "Remote Servers" at the top, then click "Add Remote MCP". In the Name field, type infisical-mcp. In the URL field, paste your Vinkius endpoint: https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp. Get your token from cloud.vinkius.com.
3

Enable the server

After saving, the server appears in the Cline MCP panel. Toggle the switch to enable it. The status indicator turns green when the connection is live.
4

Start using tools

Return to the Cline chat and ask: "Check my latest Infisical refund status." Cline will discover the available tools and request your approval before invoking each one — giving you full control over every action.

Cline MCP Settings

{
  "mcpServers": {
    "infisical-mcp": {
      "url": "https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp"
    }
  }
}

Get your connection token →

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Infisical. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

Why Choose Vinkius

Vinkius connects your tools to AI with real-time monitoring and automatic cost savings — all from one dashboard.

Connect Infisical now

Real-time monitoring

Live

visibility into every interaction

Connect your favorite tools to your AI and see exactly what's happening — every request, every response, in real time.

Built-in savings

60%

lower AI costs

Vinkius compresses data between your apps and your AI automatically. Lower bills every month — no configuration required.

Single dashboard

One

place for every integration

Every tool your AI connects to, managed from a single screen. One account, complete control.

Common questions about Infisical MCP in Cline

Click the MCP Servers icon in the Cline sidebar and use the Marketplace tab for a one-click setup. Alternatively, add the MCP Server details directly to your `cline_mcp_settings.json` file. Cline will instantly load the new tools for your next prompt.

Yes, Cline can invoke `delete_secret` if you authorize the action. Because deleting keys cannot be undone, you should review the agent's proposed plan in the VS Code sidebar before approving the execution.

Yes, Cline uses the MCP Server to call `list_environments` and detect your project's environments. This allows the agent to pull development keys for local testing, or staging keys when preparing a deployment branch.

The tool returns an error message directly from the server. Cline will then adjust its plan, perhaps running `get_project_info` to verify your project ID, and report the issue to you in the chat.

Vinkius executes the MCP Server within an ephemeral V8 Isolate sandbox, ensuring complete process isolation. Your sensitive environment variables and tokens are processed in memory and never written to persistent storage. This zero-trust architecture ensures that only your active VS Code client can access the decrypted data.

Use it with your favorite AI tools

Connect this server to Cursor, Claude, VS Code, and more.

OpenAI Agents SDK sdk-python

Google ADK sdk-python

Pydantic AI sdk-python

Vercel AI SDK sdk-typescript