Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Infisical (BYOK) — connector documentation

  • MCP endpoint: https://byok-infisical.connectorbay.com/mcp
  • REST API: POST https://byok-infisical.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-infisical.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Infisical machine identity access token (US cloud), sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-infisical.connectorbay.com/health · Tool schemas: https://byok-infisical.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-infisical · agent@connectorbay.com

What Infisical (BYOK) is for

Infisical (BYOK) lets an AI assistant read your own Infisical data through the Infisical API with a key you supply (machine identity access token (US cloud)). Read-only: 8 tools (list_projects, get_project, get_environment, list_folders, list_secret_tags, list_machine_identities, list_dynamic_secrets, list_kms_keys). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to us.infisical.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Infisical. Infisical and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which Infisical projects do we have?"
  • "What environments does Infisical project 6b1d9a0c have?"
  • "When was the prod environment created in Infisical project 6b1d9a0c?"
  • "Which folders exist under / in the prod environment of Infisical project 6b1d9a0c?"
  • "Which secret tags exist in Infisical project 6b1d9a0c?"
  • "Which machine identities have not logged in to Infisical recently?"

What it does

  • list_projects: List the projects of the organization the token belongs to with type, slug, audit log retention and their environments. Optionally filter by product type.
  • get_project: Get one project's settings: type, slug, audit log retention, delete protection and environments.
  • get_environment: Get one environment of a project by its slug, with its position and creation time.
  • list_folders: List the secret folders at a path of one environment (folder names and timestamps only, no secrets).
  • list_secret_tags: List the tags defined in a project that can be attached to secrets.
  • list_machine_identities: List the machine identities of an organization with role, last login method and last login time (no credentials).
  • list_dynamic_secrets: List the dynamic secret definitions (type, default and maximum TTL, status) at a path of an environment; no leases or credentials are returned.
  • list_kms_keys: List the KMS keys of a project (name, algorithm, usage, disabled and exportable flags); key material is not returned.

BYOK key

You bring your own Infisical machine identity access token (US cloud) (https://infisical.com/docs/documentation/platform/identities/token-auth). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to us.infisical.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Infisical API (us.infisical.com) with a BYOK key; documentation: https://infisical.com/docs/api-reference/overview/introduction. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Infisical. Infisical and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Infisical account.

Built for: Worldwide. Languages: English.