How do I connect my Infisical project?

You need to provide your Infisical Service Token, API URL, Project ID, and the specific environment slug during setup.

Which AI clients can I use with this MCP?

You can use any MCP-compatible client, including Claude, Cursor, Windsurf, and VS Code.

Can I delete secrets using the AI?

Yes, you can use the delete_secret capability, but be careful as this action cannot be undone.

Is my secret data secure?

The MCP uses Infisical's end-to-end encryption to manage your secrets infrastructure.

Can I use this to audit user activity?

Yes, you can use the list_audit_logs capability to view recent activity for compliance and security tracking.

Is it safe to manage secrets through an AI agent?

Your credentials are stored encrypted in the Vinkius vault, transmitted only to the Infisical API at runtime. The AI agent never sees raw secret values in its context. only structured operational results.

An astronaut overseeing a futuristic data hub

Download PDF Markdown Version

Connect Infisical to ChatGPT, Claude and Gemini

Set it up once and it works in ChatGPT, Claude, Cursor, and any other client you love. It all runs safely in the background, so you can relax and focus on what really matters. Manage your entire secrets infrastructure through natural conversation.

Ask AI about this Connector

Developed, maintained, and hosted by Vinkius.

MCP VERIFIED · PRODUCTION READY · VINKIUS GUARANTEED

Waiting for input…

Works with modern AI clients that support MCP, including ChatGPT, Claude, Cursor, and more.

Your AI does the work. We keep it safe and sound.

No other AI tool gives you this. Your workflow runs in the client you already love, your account stays protected, and you decide what the agent can and cannot do. It is the whole reason to make the switch.

Each Connector lives inside our infrastructure, the same place where your workflow runs. The three things below are already part of it, working quietly in the background so you never have to think about them. Nothing to add, nothing to set up, nothing to worry about.

V8 Isolate01

Each Connector runs inside its own sealed environment.

Each Connector runs inside its own sealed V8 runtime — no access to your files, your system, or other servers. A Connector never sees past its own request.

Kill Switch02

One switch stops every agent. Instantly.

One action deactivates every Connector, revokes every token, and ends every session at once. AI Governance keeps the record.

FinOps per User03

Spending limits that pause instead of surprise.

Every user keeps their own connections and credentials, isolated from everyone else. Anything that would cross your spending limit is held for your approval, not billed.

Three controls, built into the layer your AI connects through.

Curated set · 9 capabilities

We ship only the actions that matter.

Capability set01 / 03

01-03

3 capabilities in this set.

Part of 9 available through Infisical.

01
Create secret
Provisions a new secret in your Infisical project. Use this when the key doesn't already exist at the target path.
02
Delete secret
Removes a secret from your project. This action is permanent and cannot be undone.
03
List audit logs
Retrieves recent audit log entries. This is your primary way to monitor project activity for compliance.

Capability set02 / 03

04-06

3 capabilities in this set.

Part of 9 available through Infisical.

04
List environments
Shows all available environments like dev, staging, or prod. Use this to see where you can deploy secrets.
05
List secrets
Lists all secrets within a specific path and environment. It's the quickest way to audit your current configuration.
06
Get project info
Returns metadata and configuration details for your connected Infisical project.

Capability set03 / 03

07-09

3 capabilities in this set.

Part of 9 available through Infisical.

07
Get secret
Fetches a specific secret by its key name. You can also specify a path if it isn't at the root.
08
List identities
Lists the machine identities configured in your organization to help you audit automated access.
09
Update secret
Changes the value of an existing secret. The key must already exist in the project.

Real work

What teams actually run

Rapid Credential Updates

Tell your agent to update a database password in staging after a rotation event.

Compliance Checks

Ask your agent to pull recent audit logs to verify who accessed a specific production secret.

Environment Discovery

Quickly check which environments are active before deploying new configuration values.

Identity Auditing

Verify which machine identities have access to your project's secrets.

Automate a task

Put Infisical to work on one thing.

Step-by-step automations your AI runs through this Connector: the workflow, the prompts to start with, and the exact capabilities behind each move.

One connector, every AI

Infisical works with the most popular AI clients.

These are the most popular clients, each with a step-by-step guide: one link, set up once, with governance and visibility built in. And because everything runs on the MCP standard, the same connection also works in any other compatible client — nothing to rebuild.

Building your own app? The connector is yours to use.

You don't need a client to put Infisical to work: the same hosted connection plugs into your own applications and agent code, with the same governance on every request. Build with it, chat with it — one connection for both.

Observed, not estimated

965ms average. Fast in production.

Infisical is checked daily against the live service.

Daily averagePeak 1159ms

Oct 3Today

Fastest day: 849ms
Slowest day: 1159ms
14-day trend: Improving-5%

Connect your client

One URL. Every client.

Activate the Connector, copy your link, and paste it into the client you already use. 9 capabilities arrive ready to run.

Preview access · not provider authentication

The vk_preview_* token belongs to Vinkius preview infrastructure. It lets Claude discover and display the capabilities of Infisical, so you can see the experience inside your AI.

It does not authenticate your account with Infisical. Actions requiring credentials or live account data may not run until you activate the Connector and authorize the service.

Infisical Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_ldGO0JB95xTZUf7eLk52XBp8d2bgs0ppYPfZvUHl/mcp

Claude Desktop

Follow the steps below to connect in seconds.

1In Claude Desktop, open Settings → Connectors.
2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
3Click Add and start a new chat — Infisical capabilities are ready to use.

Configuration · claude_desktop_config.jsonCopy

{
  "mcpServers": {
    "infisical-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_ldGO0JB95xTZUf7eLk52XBp8d2bgs0ppYPfZvUHl/mcp"
    }
  }
}

Claude
ChatGPT
Cursor
VS Code
Windsurf
Claude Code
JetBrains
Cline

Step-by-step instructions for each client are in the guide. How to connect

Guided setup for Claude? Set up Infisical in Claude and other AIs

See all the AI clients this connector works with ↑

Who it's for

Built for the work Infisical owners hand off.

This MCP is built for technical teams managing sensitive application configurations.

01
DevOps Engineers
Manage secrets across multiple environments without leaving their primary workflow.
02
Security Teams
Audit secret access and identity permissions directly from an AI interface.
03
Platform Engineers
Automate environment configuration and secret rotation tasks.

FAQ

Questions Infisical owners ask.

01
How do I connect my Infisical project?
You need to provide your Infisical Service Token, API URL, Project ID, and the specific environment slug during setup.
02
Which AI clients can I use with this MCP?
You can use any MCP-compatible client, including Claude, Cursor, Windsurf, and VS Code.
03
Can I delete secrets using the AI?
Yes, you can use the delete_secret capability, but be careful as this action cannot be undone.
04
Is my secret data secure?
The MCP uses Infisical's end-to-end encryption to manage your secrets infrastructure.
05
Can I use this to audit user activity?
Yes, you can use the list_audit_logs capability to view recent activity for compliance and security tracking.
06
Is it safe to manage secrets through an AI agent?
Your credentials are stored encrypted in the Vinkius vault, transmitted only to the Infisical API at runtime. The AI agent never sees raw secret values in its context. only structured operational results.

Explore

More in Developer Tools

Connect Infisical to Claude, Cursor, ChatGPT & more

Your AI does the work. We keep it safe and sound.

Each Connector runs inside its own sealed environment.

One switch stops every agent. Instantly.

Spending limits that pause instead of surprise.

We ship only the actions that matter.

01-03

Create secret

Delete secret

List audit logs

04-06

List environments

List secrets

Get project info

07-09

Get secret

List identities

Update secret

What teams actually run

Rapid Credential Updates

Compliance Checks

Environment Discovery

Identity Auditing

Building your own app? The connector is yours to use.

Infisical Connector

Claude Desktop

DevOps Engineers

Security Teams

Platform Engineers

How do I connect my Infisical project?

Which AI clients can I use with this MCP?

Can I delete secrets using the AI?

Is my secret data secure?

Can I use this to audit user activity?

Is it safe to manage secrets through an AI agent?

Doppler AI Connector

HashiCorp Vault AI Connector

Vertiv Environet AI Connector

Supabase AI Connector

Suggestions

AWS Secrets Manager Rotation Calculator AI Connector

Environmental Compliance & Risk Analyzer AI Connector

EPA Envirofacts (Environmental Data) AI Connector

Env Variable Config Validator AI Connector