🎯Skills7
Provides AI coding agents with a setup guide for Infisical, the open-source secret management platform, available as installable skills or via a docs MCP server for always-up-to-date documentation access.
Provides AI coding agents with accurate knowledge about Infisical's secret synchronization features, available as installable agent skills or via a docs MCP server for real-time documentation access.
Provides guidance for working with the Infisical REST API to manage secrets, projects, environments, and machine identities. Covers Universal Auth authentication, CRUD operations on secrets via the v4 API, pagination, rate limiting, and region selection for both cloud and self-hosted deployments.
Guides configuration of the Infisical Agent, a client daemon that manages token lifecycle and renders secrets to files via Go templates. Covers all 6 auth methods (Universal Auth, Kubernetes, AWS IAM, Azure, GCP), template functions, polling, caching, and deployment patterns.
A setup guide for configuring Infisical Dynamic Secrets, which generate on-demand, short-lived credentials for 27 providers including PostgreSQL, MySQL, Redis, MongoDB, AWS IAM, GCP IAM, SSH certificates, and Kubernetes service accounts. Covers prerequisites, provider selection, TTL management, and gateway setup for private networks.
Guides deployment and operation of self-hosted Infisical instances with Docker, Docker Compose, and Kubernetes, covering ENCRYPTION_KEY management, PostgreSQL/Redis setup, production hardening, FIPS compliance, horizontal scaling, and high availability patterns.
A skill from Infisical's AI skills collection that provides accurate knowledge about the open-source secret management platform. Covers CLI workflows, SDKs for multiple languages, Docker integration, and Terraform/Kubernetes configurations.
🔌Plugins17
The Infisical Kubernetes Operator — syncing secrets into Kubernetes Secrets and ConfigMaps via v1beta1 and legacy v1alpha1 CRDs, with auto-reload and push-secret support.
Infisical Certificate Management — certificate authorities, certificate profiles and applications, ACME/EST/SCEP/API enrollment, PKI syncs, code signing, and post-quantum algorithms.
Create and manage Infisical App Connections — the reusable authenticated links to 83 third-party services that Secret Syncs, Secret Rotations, PKI, and Secret Scanning all depend on.
Guide for configuring Infisical Secret Syncs to push secrets to all 48 supported destinations including AWS Secrets Manager, GCP Secret Manager, Azure Key Vault, GitHub, Vercel, HashiCorp Vault, Snowflake, and Databricks.
The Infisical Gateway and Relay — reaching private network resources with outbound-only SSH reverse tunnels, gateway pools for HA, and no inbound firewall rules.
Guide for configuring Infisical Dynamic Secrets — on-demand, short-lived credentials for databases, cloud IAM, SSH, and Kubernetes across all 30 providers.
Infisical access control and governance — roles and custom permissions, granular secret actions, ABAC, temporary access, approval workflows, and audit log streaming.
Guide for the Infisical REST API — authentication, secrets CRUD (v4), projects, identities, pagination, and rate limits.
Infisical Secret Scanning — detecting leaked credentials in GitHub/GitLab/Bitbucket repositories and locally with the `infisical scan` CLI, plus AWS honey tokens.
Connect Infisical to an identity provider — SAML, OIDC, LDAP and free Google/GitHub SSO, SCIM user and group provisioning, group-to-role mapping, and SSO enforcement with break-glass access.
Interactive setup guide for integrating Infisical into your projects — CLI, Docker, Kubernetes, CI/CD, SDKs, and machine identity auth.
Configure Infisical Secret Rotation — automatically rotating existing third-party credentials on a schedule across 28 providers, with dual-phase zero-downtime rotation.
Guide for configuring the Infisical Agent — a client daemon that manages auth token lifecycle and renders secrets to files via Go templates.
Guide for using the Infisical Terraform Provider — HCL resources, ephemeral secrets, data sources, project roles, and Terraform Cloud OIDC integration.
Infisical KMS — managed cryptographic keys for encrypt/decrypt, sign/verify, and HMAC, plus external KMS backing, KMIP, and Sigstore cosign.
Guide for self-hosting Infisical — Docker, Kubernetes Helm, environment variables, ENCRYPTION_KEY setup, FIPS compliance, scaling, and production hardening.
Infisical Privileged Access Manager — brokered access to databases and servers for humans and AI agents, with session recording, approvals, and no credential exposure.