Infisical MCP Server

npx -y @infisical/mcp

{
  "mcpServers": {
    "infisical-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@infisical/mcp"
      ]
    }
  }
}

The reason to reach for a secrets manager from an agent is precisely so that credentials do not end up in the transcript. This official server lets the model list projects and environments, create, update and delete secrets, and manage folders — with values retrieved through the API at the moment they are needed. Machine identity authentication is used rather than a personal token, so the agent's access can be scoped and revoked separately.