{"_id":"@infisical/mcp","_rev":"10-b7259d8d04e245bfcb15d9bd57acaa37","name":"@infisical/mcp","dist-tags":{"latest":"0.1.0"},"versions":{"0.0.1":{"name":"@infisical/mcp","version":"0.0.1","keywords":["infisical","open-source","sdk","typescript","mcp","mcp-server","secrets-management","secrets","secrets-manager"],"author":{"name":"Infisical Inc,","email":"daniel@infisical.com"},"license":"Apache-2.0","_id":"@infisical/mcp@0.0.1","maintainers":[{"name":"vmatsiiako","email":"vlad@infisical.com"},{"name":"maidul","email":"maidul@infisical.com"},{"name":"danielhougaard","email":"dani250g@hotmail.com"},{"name":"akhilmhdh","email":"akhilmhdh@gmail.com"},{"name":"carlosmonastyrski","email":"carlos@infisical.com"}],"homepage":"https://github.com/infisical/infisical-mcp-server#readme","bugs":{"url":"https://github.com/infisical/infisical-mcp-server/issues"},"dist":{"shasum":"8f945794d368b0db751e95f0b17cd3b299baca72","tarball":"https://registry.npmjs.org/@infisical/mcp/-/mcp-0.0.1.tgz","fileCount":4,"integrity":"sha512-pvLHpnoMwep5fjYukaF4vlrYHd0jXY9zTZANJvqW29HSl50DlU6buCfayi1OMAiVheeeaLaQmODoAnnR/KpUTw==","signatures":[{"sig":"MEUCIQC/CGe+3WLDUOX5Tws9iedQwPE6KrjkSiMwZss6OZlTCAIgI764CnWf1psSpJFwKpEyYcFfGeUGfzJFc6XZ87+oa2o=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":37592},"main":"dist/index.js","gitHead":"7844a14e56f1eb613d9d87d81a71ad0d02e1a727","scripts":{"build":"tsup src/index.ts --out-dir dist --format cjs --tsconfig tsconfig.json --no-splitting"},"_npmUser":{"name":"danielhougaard","email":"dani250g@hotmail.com"},"repository":{"url":"git+https://github.com/infisical/infisical-mcp-server.git","type":"git"},"_npmVersion":"10.8.2","description":"Official Infisical MCP Server","directories":{},"_nodeVersion":"20.19.0","dependencies":{"zod":"^3.24.2","typescript":"^5.8.3","@infisical/sdk":"^3.0.8","@modelcontextprotocol/sdk":"^1.9.0"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.4.0","@types/node":"^22.14.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.0.1_1744416371797_0.2162010816925426","host":"s3://npm-registry-packages-npm-production"}},"0.0.2":{"name":"@infisical/mcp","version":"0.0.2","keywords":["infisical","open-source","sdk","typescript","mcp","mcp-server","secrets-management","secrets","secrets-manager"],"author":{"name":"Infisical Inc,","email":"daniel@infisical.com"},"license":"Apache-2.0","_id":"@infisical/mcp@0.0.2","maintainers":[{"name":"vmatsiiako","email":"vlad@infisical.com"},{"name":"maidul","email":"maidul@infisical.com"},{"name":"danielhougaard","email":"dani250g@hotmail.com"},{"name":"akhilmhdh","email":"akhilmhdh@gmail.com"},{"name":"carlosmonastyrski","email":"carlos@infisical.com"}],"homepage":"https://github.com/infisical/infisical-mcp-server#readme","bugs":{"url":"https://github.com/infisical/infisical-mcp-server/issues"},"bin":{"mcp":"dist/index.js"},"dist":{"shasum":"ee77fc26f80848c4d753174c8e8242353894280e","tarball":"https://registry.npmjs.org/@infisical/mcp/-/mcp-0.0.2.tgz","fileCount":4,"integrity":"sha512-nEjJEqyvo7gbMsQwIiWoTxDbmZuDBND1tu/rt36zj1YGLuWultEBcdqo0NZsNLPxI+I4KH52DonXUO4YLHeeYQ==","signatures":[{"sig":"MEUCIFZSypW4VMcoWl7DJLHyGbUsP8fF2Y6kF/4ZqJ+eUzy2AiEA/cOq8H6OekvRfRVlA+SPnDr3LBKvOxmMA/FWx8sr0d4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":37638},"main":"dist/index.js","gitHead":"b98e69a6f5c5df3dba7581324b099ab21e9bb805","scripts":{"build":"tsup src/index.ts --out-dir dist --format cjs --tsconfig tsconfig.json --no-splitting"},"_npmUser":{"name":"danielhougaard","email":"dani250g@hotmail.com"},"repository":{"url":"git+https://github.com/infisical/infisical-mcp-server.git","type":"git"},"_npmVersion":"10.8.2","description":"Official Infisical MCP Server","directories":{},"_nodeVersion":"20.19.0","dependencies":{"zod":"^3.24.2","typescript":"^5.8.3","@infisical/sdk":"^3.0.8","@modelcontextprotocol/sdk":"^1.9.0"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.4.0","@types/node":"^22.14.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.0.2_1744417729255_0.4968619398600349","host":"s3://npm-registry-packages-npm-production"}},"0.0.21":{"name":"@infisical/mcp","version":"0.0.21","keywords":["infisical","open-source","sdk","typescript","mcp","mcp-server","secrets-management","secrets","secrets-manager"],"author":{"name":"Infisical Inc,","email":"daniel@infisical.com"},"license":"Apache-2.0","_id":"@infisical/mcp@0.0.21","maintainers":[{"name":"vmatsiiako","email":"vlad@infisical.com"},{"name":"maidul","email":"maidul@infisical.com"},{"name":"danielhougaard","email":"dani250g@hotmail.com"},{"name":"akhilmhdh","email":"akhilmhdh@gmail.com"},{"name":"carlosmonastyrski","email":"carlos@infisical.com"}],"homepage":"https://github.com/infisical/infisical-mcp-server#readme","bugs":{"url":"https://github.com/infisical/infisical-mcp-server/issues"},"bin":{"mcp":"dist/index.js"},"dist":{"shasum":"6ed3ce8afcf043877c5e4116757defd89b2a5671","tarball":"https://registry.npmjs.org/@infisical/mcp/-/mcp-0.0.21.tgz","fileCount":4,"integrity":"sha512-aj0t52iQPe8kxACDjpqpOJsWv4llchaokepHa5+EaCMGpUG+7d0YJ7pCfGnBgu8uPDYUuVrZyCVI07dlDp0NzQ==","signatures":[{"sig":"MEUCIG0owamDODh+Lzo0XUdHn6XT6nFUzx3Y23vKOzgBshL4AiEAxe5P+Tny5flP6fC1llkHcm8wKtobRHTfVFcWomD8+TA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":37642},"main":"dist/index.js","gitHead":"a8ef4342087e4c3c1758062639f0b479c26e9acd","scripts":{"build":"tsup src/index.ts --out-dir dist --format cjs --tsconfig tsconfig.json --no-splitting"},"_npmUser":{"name":"danielhougaard","email":"dani250g@hotmail.com"},"repository":{"url":"git+https://github.com/infisical/infisical-mcp-server.git","type":"git"},"_npmVersion":"10.8.2","description":"Official Infisical MCP Server","directories":{},"_nodeVersion":"20.19.0","dependencies":{"zod":"^3.24.2","typescript":"^5.8.3","@infisical/sdk":"^3.0.8","@modelcontextprotocol/sdk":"^1.9.0"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.4.0","@types/node":"^22.14.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.0.21_1744418192409_0.5855613743895538","host":"s3://npm-registry-packages-npm-production"}},"0.0.22":{"name":"@infisical/mcp","version":"0.0.22","keywords":["infisical","open-source","sdk","typescript","mcp","mcp-server","secrets-management","secrets","secrets-manager"],"author":{"name":"Infisical Inc,","email":"daniel@infisical.com"},"license":"Apache-2.0","_id":"@infisical/mcp@0.0.22","maintainers":[{"name":"vmatsiiako","email":"vlad@infisical.com"},{"name":"maidul","email":"maidul@infisical.com"},{"name":"danielhougaard","email":"dani250g@hotmail.com"},{"name":"akhilmhdh","email":"akhilmhdh@gmail.com"},{"name":"carlosmonastyrski","email":"carlos@infisical.com"}],"homepage":"https://github.com/infisical/infisical-mcp-server#readme","bugs":{"url":"https://github.com/infisical/infisical-mcp-server/issues"},"bin":{"mcp":"dist/index.js"},"dist":{"shasum":"42b4cc95f7d5c6be3b4733dc8dcda58c465ba794","tarball":"https://registry.npmjs.org/@infisical/mcp/-/mcp-0.0.22.tgz","fileCount":4,"integrity":"sha512-FlZrBmcbkaoLKTW6TrKv6pydtNeVMdKMTggLtReLKIpljc/Zw4nz+aDfe57cZ+4HBmdAVxQMeMB+761RZYPmwA==","signatures":[{"sig":"MEYCIQDhRmnMOxKNxRyRyxXyTfWz6m3BDlgQwIFONlV/foKqzgIhAMNmmafmV9P+YJA9nAnTW3Sshd69nLOuAiCRac/SRcTl","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":39741},"main":"dist/index.js","gitHead":"7022d3db7fcb6ef59392c3c07b4a356638fe1d4c","scripts":{"build":"tsup src/index.ts --out-dir dist --format cjs --tsconfig tsconfig.json --no-splitting"},"_npmUser":{"name":"danielhougaard","email":"dani250g@hotmail.com"},"repository":{"url":"git+https://github.com/infisical/infisical-mcp-server.git","type":"git"},"_npmVersion":"10.8.2","description":"Official Infisical MCP Server","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zod":"^3.24.2","axios":"^1.9.0","typescript":"^5.8.3","@infisical/sdk":"4.0.1","@modelcontextprotocol/sdk":"^1.9.0"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.4.0","@types/node":"^22.14.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.0.22_1749153641482_0.41792580036048954","host":"s3://npm-registry-packages-npm-production"}},"0.0.23":{"name":"@infisical/mcp","version":"0.0.23","keywords":["infisical","open-source","sdk","typescript","mcp","mcp-server","secrets-management","secrets","secrets-manager"],"author":{"name":"Infisical Inc,","email":"daniel@infisical.com"},"license":"Apache-2.0","_id":"@infisical/mcp@0.0.23","maintainers":[{"name":"vmatsiiako","email":"vlad@infisical.com"},{"name":"maidul","email":"maidul@infisical.com"},{"name":"danielhougaard","email":"dani250g@hotmail.com"},{"name":"victor.infisical","email":"victor@infisical.com"},{"name":"akhilmhdh","email":"akhilmhdh@gmail.com"},{"name":"carlosmonastyrski","email":"carlos@infisical.com"}],"homepage":"https://github.com/Infisical/infisical-mcp-server#readme","bugs":{"url":"https://github.com/Infisical/infisical-mcp-server/issues"},"bin":{"mcp":"dist/index.js"},"dist":{"shasum":"cfb23c3f89fc2ec5e20fe62d098ae9717a6c65d1","tarball":"https://registry.npmjs.org/@infisical/mcp/-/mcp-0.0.23.tgz","fileCount":4,"integrity":"sha512-ozLv37L9Vek43BLa7HYkiPg50/6VJ0pL2KVMoOoXR8DSJihvNmWchZ3NT1Z8ZvAFe1Y0D+foCeRnCzgmv7Q0Uw==","signatures":[{"sig":"MEUCIDUWFUZVjSoRWsPh/dffImZ95YFp4jlx9HMFjvSV+MOrAiEAs4++I5I1Pot7f29S8lO3cQcI3CLUeMnDWcP+ZNAThas=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@infisical%2fmcp@0.0.23","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":42630},"main":"dist/index.js","gitHead":"20eba84f0ac9d3e6d1310d0735e51863f5be5f1d","scripts":{"build":"tsup src/index.ts --out-dir dist --format cjs --tsconfig tsconfig.json --no-splitting"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a7a3ad80-e9b6-46a7-bcfc-81ed93cd2b24"}},"overrides":{"xml2js":"^0.5.0"},"repository":{"url":"git+https://github.com/Infisical/infisical-mcp-server.git","type":"git"},"_npmVersion":"11.9.0","description":"Official Infisical MCP Server","directories":{},"_nodeVersion":"24.14.0","dependencies":{"zod":"^3.24.2","axios":"^1.9.0","typescript":"^5.8.3","@infisical/sdk":"4.0.1","@modelcontextprotocol/sdk":"^1.9.0"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.4.0","@types/node":"^22.14.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.0.23_1776201299932_0.6935424523793978","host":"s3://npm-registry-packages-npm-production"}},"0.0.24":{"name":"@infisical/mcp","version":"0.0.24","keywords":["infisical","open-source","sdk","typescript","mcp","mcp-server","secrets-management","secrets","secrets-manager"],"author":{"name":"Infisical Inc,","email":"daniel@infisical.com"},"license":"Apache-2.0","_id":"@infisical/mcp@0.0.24","maintainers":[{"name":"danielhougaard","email":"dani250g@hotmail.com"}],"homepage":"https://github.com/Infisical/infisical-mcp-server#readme","bugs":{"url":"https://github.com/Infisical/infisical-mcp-server/issues"},"bin":{"mcp":"dist/index.js"},"dist":{"shasum":"fc7ad7bad7f16dc5d9fb862f5db52ad7d0b5b3b7","tarball":"https://registry.npmjs.org/@infisical/mcp/-/mcp-0.0.24.tgz","fileCount":4,"integrity":"sha512-9Jecw7PAUZPQ5JEKflSftD40b+tA0nGVHeBazkqUbA9MQqnPfU1LjTgcth+yH29PJwnlNNcaOtfVw8yJ9oRLUA==","signatures":[{"sig":"MEUCIQCYBPh+So0OVj9nD4UngKvqKqhxeFTRGFIAKVBpSk6ncAIgT1cgiQ8l4sYoKiNXUqWyxintiX/BFLI5xAAUgEBSTMQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@infisical%2fmcp@0.0.24","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":48307},"main":"dist/index.js","gitHead":"d19e3ca244d0c1b2506d39803a73e6e2c3730efa","scripts":{"build":"tsup src/index.ts --out-dir dist --format cjs --tsconfig tsconfig.json --no-splitting","typecheck":"tsc --noEmit -p tsconfig.json"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:a7a3ad80-e9b6-46a7-bcfc-81ed93cd2b24"}},"overrides":{"xml2js":"^0.5.0"},"repository":{"url":"git+https://github.com/Infisical/infisical-mcp-server.git","type":"git"},"_npmVersion":"11.9.0","description":"Official Infisical MCP Server","directories":{},"_nodeVersion":"24.14.0","dependencies":{"zod":"^3.24.2","axios":"^1.9.0","@infisical/sdk":"4.0.1","@modelcontextprotocol/sdk":"^1.9.0"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8.4.0","typescript":"^5.8.3","@types/node":"^22.14.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.0.24_1789002719925_0.32884137049430606","host":"s3://npm-registry-packages-npm-production"}},"0.0.25":{"name":"@infisical/mcp","version":"0.0.25","keywords":["infisical","open-source","sdk","typescript","mcp","mcp-server","secrets-management","secrets","secrets-manager"],"author":{"name":"Infisical Inc,","email":"daniel@infisical.com"},"license":"Apache-2.0","_id":"@infisical/mcp@0.0.25","maintainers":[{"name":"danielhougaard","email":"dani250g@hotmail.com"}],"homepage":"https://github.com/Infisical/infisical-mcp-server#readme","bugs":{"url":"https://github.com/Infisical/infisical-mcp-server/issues"},"bin":{"mcp":"dist/index.js"},"dist":{"shasum":"b125169abbd70aaa201deeb00a3c2edff13e8807","tarball":"https://registry.npmjs.org/@infisical/mcp/-/mcp-0.0.25.tgz","fileCount":6,"integrity":"sha512-ZBFqMOhF3pmb+QYkkO2Cu68dZPGyXVo4cpIAEjt7EEJkNrTE27R5CXZcAOvTqXrTQmD75ytllFG7lI+iRc2ITw==","signatures":[{"sig":"MEQCIB4tDK+zfrJDaq6rO6ce9SWjaxNTHSzut38oE0qBT31FAiAvt3x5BBc8HEw9lsA61v1R18RRQBXSqA31FVzqHNoq6w==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCIH+AADYHa0wvU+ketaaL845lU5+xFSxqB+e1VQrk/mPGAiAlB1Fc9dxffssCAyruN75vYY3IW2Cj3mYBH0r06jSbbw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@infisical%2fmcp@0.0.25","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":288043},"main":"dist/index.js","gitHead":"287048a842154f00302d7f0fde97f559f803932a","scripts":{"test":"node --test --test-timeout=30000 test/*.test.js","build":"tsup src/index.ts --out-dir dist --format cjs --tsconfig tsconfig.json --no-splitting","pretest":"npm run build","typecheck":"tsc --noEmit -p tsconfig.json"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"a7a3ad80-e9b6-46a7-bcfc-81ed93cd2b24"}},"repository":{"url":"git+https://github.com/Infisical/infisical-mcp-server.git","type":"git"},"_npmVersion":"11.19.1","description":"Official Infisical MCP Server","directories":{},"_nodeVersion":"24.22.1","dependencies":{"zod":"4.6.7","axios":"1.20.0","@modelcontextprotocol/sdk":"1.32.1"},"_hasShrinkwrap":true,"devDependencies":{"tsup":"^8.4.0","typescript":"^5.8.3","@types/node":"^22.14.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.0.25_1793652872706_0.7916490485374181","host":"s3://npm-registry-packages-npm-production"}},"0.1.0":{"_id":"@infisical/mcp@0.1.0","bin":{"mcp":"dist/index.js"},"bugs":{"url":"https://github.com/Infisical/infisical-mcp-server/issues"},"dist":{"shasum":"a5170d46da2f7acbf49fb2b275fb7998aba74a48","tarball":"https://registry.npmjs.org/@infisical/mcp/-/mcp-0.1.0.tgz","fileCount":6,"integrity":"sha512-ntVzgjiZwm9rOhSiVFgbdxux0xCGv08lm+hV8ybWWJTLn00UFcwtK6V94b3N+G6mTshTS+MqVDMjRIUTjlD97Q==","signatures":[{"sig":"MEYCIQCYAFilJmI2T+KpxxVVXMuRMdB3LBYLiW/ENqJrWSUrNgIhAIkgAzzkL6YDNFOc56XgK/TGfMff95CRvI5xlks13fmM","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQDMdkowwhb03zO7UQqpX7mJ2z9ygLpMIXw8PwskxL4cqwIgK633TBd51ZRQj/bBfzWZOLp0VON7IWy+pvRQAfL4njE="}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@infisical%2fmcp@0.1.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":303596},"main":"dist/index.js","name":"@infisical/mcp","author":{"name":"Infisical Inc,","email":"daniel@infisical.com"},"gitHead":"505cf21640de1fc9521ec242891ea41714b6e332","license":"Apache-2.0","scripts":{"test":"node --test --test-timeout=30000 test/*.test.js","build":"tsup src/index.ts --out-dir dist --format cjs --tsconfig tsconfig.json --no-splitting","pretest":"npm run build","typecheck":"tsc --noEmit -p tsconfig.json"},"version":"0.1.0","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"a7a3ad80-e9b6-46a7-bcfc-81ed93cd2b24"}},"homepage":"https://github.com/Infisical/infisical-mcp-server#readme","keywords":["infisical","open-source","sdk","typescript","mcp","mcp-server","secrets-management","secrets","secrets-manager"],"repository":{"url":"git+https://github.com/Infisical/infisical-mcp-server.git","type":"git"},"_npmVersion":"11.19.1","description":"Official Infisical MCP Server","directories":{},"maintainers":[{"name":"danielhougaard","email":"dani250g@hotmail.com"}],"_nodeVersion":"24.22.1","dependencies":{"zod":"4.6.7","axios":"1.20.0","@modelcontextprotocol/sdk":"1.32.1"},"_hasShrinkwrap":true,"devDependencies":{"tsup":"^8.4.0","typescript":"^5.8.3","@types/node":"^22.14.0"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/mcp_0.1.0_1794541884007_0.43984598464908264"}}},"time":{"created":"2025-04-12T00:06:11.699Z","modified":"2026-11-13T03:51:24.714Z","0.0.1":"2025-04-12T00:06:12.030Z","0.0.2":"2025-04-12T00:28:49.441Z","0.0.21":"2025-04-12T00:36:32.587Z","0.0.22":"2025-06-05T20:00:41.671Z","0.0.23":"2026-04-14T21:15:00.074Z","0.0.24":"2026-09-10T01:12:00.065Z","0.0.25":"2026-11-02T20:54:32.777Z","0.1.0":"2026-11-13T03:51:24.115Z"},"bugs":{"url":"https://github.com/Infisical/infisical-mcp-server/issues"},"author":{"name":"Infisical Inc,","email":"daniel@infisical.com"},"license":"Apache-2.0","homepage":"https://github.com/Infisical/infisical-mcp-server#readme","keywords":["infisical","open-source","sdk","typescript","mcp","mcp-server","secrets-management","secrets","secrets-manager"],"repository":{"url":"git+https://github.com/Infisical/infisical-mcp-server.git","type":"git"},"description":"Official Infisical MCP Server","maintainers":[{"name":"danielhougaard","email":"dani250g@hotmail.com"}],"readme":"# Infisical Model Context Protocol\n\nThe Infisical [Model Context Protocol](https://modelcontextprotocol.io/) server allows you to integrate with Infisical APIs through function calling. This protocol supports various tools to interact with Infisical.\n\n## Setup\n\n### Environment variables\n\nIn order to use the MCP server, you must first set the environment variables required for authentication.\n\n- `INFISICAL_AUTH_METHOD`: The authentication method to use. Supported values are `universal-auth` and `access-token`. Defaults to `universal-auth`.\n- `INFISICAL_UNIVERSAL_AUTH_CLIENT_ID`: The Machine Identity universal auth client ID. Required when `INFISICAL_AUTH_METHOD` is `universal-auth`.\n- `INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET`: The Machine Identity universal auth client secret. Required when `INFISICAL_AUTH_METHOD` is `universal-auth`.\n- `INFISICAL_TOKEN`: An access token for authentication. This can be both a personal access token or a machine identity access token. Required when `INFISICAL_AUTH_METHOD` is `access-token`.\n- `INFISICAL_HOST_URL`: **Optionally** set a custom host URL. This is useful if you're self-hosting Infisical or you're on dedicated infrastructure. Defaults to `https://app.infisical.com`.\n\nBy default every tool is exposed and secret values are returned, as in earlier versions. [Limiting what the server exposes](#limiting-what-the-server-exposes) explains how to restrict both, which we recommend, and [Audit log](#audit-log) covers what the server records.\n\nTo run the Infisical MCP server using npx, use the following command:\n\n```bash\nnpx -y @infisical/mcp\n```\n\n### Usage with Claude Desktop\n\nAdd the following to your `claude_desktop_config.json`. See [here](https://modelcontextprotocol.io/quickstart/user) for more details.\n\n#### Universal Auth (default)\n\n```json\n{\n  \"mcpServers\": {\n    \"infisical\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@infisical/mcp\"],\n      \"env\": {\n        \"INFISICAL_HOST_URL\": \"https://<custom-host-url>.com\",\n        \"INFISICAL_UNIVERSAL_AUTH_CLIENT_ID\": \"<machine-identity-universal-auth-client-id>\",\n        \"INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET\": \"<machine-identity-universal-auth-client-secret>\"\n      }\n    }\n  }\n}\n```\n\n#### Access Token\n\n```json\n{\n  \"mcpServers\": {\n    \"infisical\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"@infisical/mcp\"],\n      \"env\": {\n        \"INFISICAL_HOST_URL\": \"https://<custom-host-url>.com\",\n        \"INFISICAL_AUTH_METHOD\": \"access-token\",\n        \"INFISICAL_TOKEN\": \"<your-access-token>\"\n      }\n    }\n  }\n}\n```\n\n## Available tools\n\n| Tool                        | Description                             | Read-only |\n| --------------------------- | --------------------------------------- | --------- |\n| `create-secret`             | Create a new secret                     | No        |\n| `delete-secret`             | Delete a secret                         | No        |\n| `update-secret`             | Update a secret                         | No        |\n| `list-secrets`              | Lists all secrets                       | Yes       |\n| `get-secret`                | Get a single secret                     | Yes       |\n| `create-project`            | Create a new project                    | No        |\n| `create-environment`        | Create a new environment                | No        |\n| `create-folder`             | Create a new folder                     | No        |\n| `list-folders`              | List the folders in an environment      | Yes       |\n| `invite-members-to-project` | Invite one or more members to a project | No        |\n| `list-projects`             | List all projects                       | Yes       |\n\nTools that take a `projectId` also accept the project's slug or exact name, and tools that take an environment slug also accept the environment's name, such as `Production` for `prod`. The server looks these up only when Infisical reports that the project or environment does not exist, so a call that passes the ID and slug sends no extra request. When it resolves a name, the response notes the ID and slug it used. `list-secrets` takes `recursive` to include the secrets in every folder below `secretPath`, and `list-projects` takes `search` to list only the projects whose name or slug contains it.\n\n## Limiting what the server exposes\n\nTwo optional variables restrict the server. Both default to the behaviour of earlier versions, so existing setups keep working. We recommend setting both wherever the model does not need to change anything or read secret values.\n\n- `INFISICAL_ENABLED_TOOLS`: a comma-separated allowlist of tools to expose, using the tool names from the table above. Omit it, or set it to `all`, to expose every tool. For a read-only server, list the read-only tools: `list-projects,list-secrets,get-secret,list-folders`. Tools left out are hidden from `tools/list` and refused if called. An unknown name fails at startup, and so does an empty value.\n- `INFISICAL_MASK_SECRET_VALUES`: `true` or `false`, case-insensitive. Defaults to `false`. When `true`, secret values in tool responses are replaced with `<masked>`, and `list-secrets` and `get-secret` ask Infisical not to send the values at all, so on Infisical Cloud and self-hosted v0.116.0 or later they never reach the server or the model. Secret names, paths, and other metadata are still returned.\n\nA hardened configuration sets both:\n\n```json\n\"env\": {\n  \"INFISICAL_UNIVERSAL_AUTH_CLIENT_ID\": \"<machine-identity-universal-auth-client-id>\",\n  \"INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET\": \"<machine-identity-universal-auth-client-secret>\",\n  \"INFISICAL_ENABLED_TOOLS\": \"list-projects,list-secrets,get-secret,list-folders\",\n  \"INFISICAL_MASK_SECRET_VALUES\": \"true\"\n}\n```\n\nScope the machine identity to only the projects and environments the server needs, rather than using a token with broader access than the exposed tools require.\n\n### Upgrading\n\nExisting configurations keep working. Two things behave differently from earlier versions:\n\n- A tool that fails while running, for example because Infisical refused the request, returns a result with `isError` set and the reason as its text, instead of a JSON-RPC error. Calling an unknown or disabled tool is still a JSON-RPC error.\n- `create-project` creates a `secret-manager` project when no `type` is given, and no longer offers `pam`, which Infisical creates for each organization by itself.\n- `create-folder` takes the environment as `environmentSlug`, like the other tools. `environment` still works.\n- The secret tools use Infisical's v4 secrets API. A self-hosted version before v0.150.0 has none, and on one the server switches to the deprecated v3 routes by itself.\n\n## Audit log\n\nThe server writes one JSON object per line to stderr: a `server_started` entry with the version, host, enabled tools and masking setting, logged as a warning that names any hardening control left off, then a `tool_call` entry for every call. It also logs a `secrets_api_fallback` warning, once, when the instance has no v4 secrets API or answers it with a 404 page, and a `token_renewal_failed` warning when it could neither renew the access token nor log in again and keeps using the current token until it expires. MCP clients usually keep a server's stderr in their logs; Claude Desktop, for example, writes it to `mcp-server-infisical.log`. Each `tool_call` entry records:\n\n- `time`, `tool`, `durationMs`, and `outcome`: `success`, `pending_approval` when the change is waiting for approval, `error`, or `denied` when the tool is not enabled.\n- `actor`: the authentication method and, for universal auth, the machine identity's client ID.\n- `client`: the name and version the MCP client reported when it connected.\n- `arguments`: identifiers only, such as project ID, environment, path, secret name, and the members and roles of an invite.\n- `resolved`: the project ID and environment slug the call was sent to, when the server looked them up from a project name or environment name in `arguments`.\n- `error`: the error message, when the call failed.\n\nSecret values, the client secret and access tokens are never written. Set `INFISICAL_AUDIT_LOG=false` to turn off the `tool_call` entries.\n\nInfisical's own audit log records every secret operation as well, with the machine identity as the actor. Listing projects is the one call it does not record.\n\n## Security and operations\n\n### Network access\n\nThe server talks to its MCP client over stdio and opens no ports. Its only outbound traffic is HTTPS to `INFISICAL_HOST_URL`, and it sends no telemetry. Requests follow the standard `HTTPS_PROXY` and `NO_PROXY` variables if they are set. The endpoints it calls are:\n\n| Endpoint                                            | Used by                                                         |\n| --------------------------------------------------- | --------------------------------------------------------------- |\n| `POST /api/v1/auth/universal-auth/login`            | Universal auth login                                            |\n| `POST /api/v1/auth/token/renew`                     | Universal auth token renewal                                    |\n| `GET /api/v4/secrets`                               | `list-secrets`                                                  |\n| `GET, POST, PATCH, DELETE /api/v4/secrets/{name}`   | `get-secret`, `create-secret`, `update-secret`, `delete-secret` |\n| `/api/v3/secrets/raw`, `/api/v3/secrets/raw/{name}` | The same tools, on self-hosted versions before v0.150.0         |\n| `GET /api/v1/workspace`                             | `list-projects`, and resolving a project or environment by name |\n| `POST /api/v2/workspace`                            | `create-project`                                                |\n| `POST /api/v1/workspace/{projectId}/environments`   | `create-environment`                                            |\n| `GET, POST /api/v1/folders`                         | `list-folders`, `create-folder`                                 |\n| `POST /api/v2/workspace/{projectId}/memberships`    | `invite-members-to-project`                                     |\n\nLaunching through `npx` also contacts the npm registry to fetch the package. To avoid that at runtime, install a pinned version ahead of time and point the client at it.\n\n### Scoping the machine identity\n\nThe server enforces no permissions of its own. It can do whatever its identity can do, and Infisical enforces that on every call, so scope the identity rather than relying on the tool allowlist alone.\n\n- Prefer a machine identity with universal auth over a personal access token, which carries everything its user can do.\n- Add the identity only to the projects it needs, with a custom role limited to the environments and secret paths in question.\n- With masking on, `list-secrets` and `get-secret` only need the Describe Secret permission, on Infisical Cloud or self-hosted v0.116.0 or later. Grant Read Value only if you turn masking off.\n- Grant create, edit or delete on secrets, or permission to manage projects and members, only if you enable the tools that need them.\n- Restrict where the identity can be used from with the client secret's and access token's trusted IPs.\n\n### Rotating credentials\n\n- **Universal auth.** Create a new client secret on the identity, update `INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET` in the client's configuration, restart the client, then revoke the old secret. A short access token TTL is fine: the server renews the token shortly before it expires, and logs in again only once Infisical refuses to renew it, at the token's max TTL, so it does not need a restart when one lapses. Renewing spends none of the client secret's uses; each login spends one when the secret has a usage limit.\n- **Access token.** The server cannot renew a token passed in `INFISICAL_TOKEN`. When it expires or is rotated, update the configuration and restart the client.\n\n### Pinning, verifying and rolling back\n\n`npx -y @infisical/mcp` runs the latest release. To control when upgrades happen, pin a version in the client's configuration:\n\n```json\n\"args\": [\"-y\", \"@infisical/mcp@0.0.25\"]\n```\n\nTo roll back, pin the previous version and restart the client. Release notes are on the repository's [Releases](https://github.com/Infisical/infisical-mcp-server/releases) page.\n\nEach release is published from GitHub Actions through npm trusted publishing, with a provenance attestation naming the repository, workflow and tag it was built from. To check it, run `npm audit signatures` in a project with the package installed.\n\nThe package ships `npm-shrinkwrap.json`, so an install gets exactly the dependency versions the release was tested with, and `sbom.cdx.json`, a CycloneDX SBOM of those dependencies. The SBOM is also attached to each GitHub release.\n\nEvery pull request is checked by Socket for risky dependency changes, and by CodeQL for security issues in the code and workflows. CI fails on a high or critical advisory in a runtime dependency, or a package whose registry signature does not verify.\n\nUntil 1.0, a change to a default ships in a new minor version, never in a patch release. Each release's notes list any change in behaviour.\n\n### Reporting a vulnerability\n\nSee [SECURITY.md](SECURITY.md). Please do not open a public issue for a security problem.\n\n## Debugging the Server\n\nTo debug your server, you can use the [MCP Inspector](https://modelcontextprotocol.io/docs/tools/inspector).\n\nFirst build the server\n\n```bash\nnpm run build\n```\n\nRun the following command in your terminal:\n\n```bash\n# Start MCP Inspector and server\nnpx @modelcontextprotocol/inspector node dist/index.js\n```\n\n### Instructions\n\n1. Set the environment variables as described in the [Environment Variables ](#environment-variables) step.\n2. Run the command to start the MCP Inspector.\n3. Open the MCP Inspector UI in your browser and click Connect to start the MCP server.\n4. You can see all the available tools and test them individually.\n","readmeFilename":"README.md"}