infisical-env

Agent Plugin: Infisical secret refs, set, and path-key diff.

Tools

Tool	Purpose
list_secret_refs	GET /api/v4/secrets with viewSecretValue=false → InfisicalSecretRef[]
set_secret	POST then PATCH-on-409; value from INFISICAL_SECRET_VALUE env
diff_path_keys	Compare listed keys vs expectedKeys

Data shape

InfisicalSecretRef = { projectId, env, path, key, valueSet: boolean } — never plaintext from list/diff.

Auth (mcp.json env)

• INFISICAL_TOKEN → ${INFISICAL_TOKEN}
• INFISICAL_PROJECT_ID → ${INFISICAL_PROJECT_ID}
• INFISICAL_API_URL → ${INFISICAL_API_URL} (default API https://app.infisical.com)

Layout

• plugin.json / mcp.json / server.mjs
• skills/infisical-env/SKILL.md