Skip to content

Infisical MCP connector

The Infisical connector brings your app connections, machine identity auth methods, and admin setup into Claude, ChatGPT, Cursor, Microsoft Copilot, and any MCP client, so your team can ask about and manage Infisical in plain language.

  • Connects with an API key
  • Free 14-day trial
  • No credit card
ChatGPT Elaichi connected

List app connections created in Infisical this month.

Working in Infisical with Elaichi

  • Get single Infisical alicloud auth by ID
  • List all Infisical app connections
  • Infisical app connections 1 password get by name
Ask anything…
Governance / Audit log Last 24 hours
Infisical Infisical app connections 1 password get by name Emily Carter · ChatGPT · 9:41 AM Done
Infisical List all Infisical app connections Emily Carter · ChatGPT · 9:41 AM Done
Infisical Get single Infisical alicloud auth by ID Emily Carter · ChatGPT · 9:41 AM Done
Infisical Infisical admin bootstrap instance Megan Brooks · Claude · 9:38 AM Done
Infisical Infisical alicloud auth attach Ryan Hayes · Cursor · 9:35 AM Done

How to connect Infisical to Claude, ChatGPT, Cursor or Microsoft Copilot

Step by step, for each AI app

Infisical MCP connector for Claude

  1. 1

    Open Customize, then Connectors.

  2. 2

    Press Add.

  3. 3

    Name it, paste the MCP server URL, then Continue.

    https://api.elaichi.ai/mcp
  4. 4

    Sign in and approve.

On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves.

Infisical MCP connector for Claude Code

  1. 1

    In a terminal, run claude mcp add with the endpoint.

    https://api.elaichi.ai/mcp
  2. 2

    Start Claude Code and run /mcp.

  3. 3

    Pick elaichi, then sign in and approve in the browser.

Terminal

$ claude mcp add --transport http elaichi --scope user https://api.elaichi.ai/mcp

Use --scope project instead to share it with the repository through .mcp.json.

Infisical MCP connector for ChatGPT

  1. 1

    Open Plugins, then press the + button.

  2. 2

    Name it and paste the endpoint into Server URL.

    https://api.elaichi.ai/mcp
  3. 3

    Leave Authentication on OAuth, then tick the risk acknowledgement.

  4. 4

    Press Create, then sign in and approve.

Works on the web. The plugin directory lives at chatgpt.com/plugins.

Infisical MCP connector for Cursor

  1. 1

    Open ~/.cursor/mcp.json.

  2. 2

    Add the endpoint under mcpServers.

    https://api.elaichi.ai/mcp
  3. 3

    Reload Cursor, then sign in and approve.

~/.cursor/mcp.json

{
  "mcpServers": {
    "elaichi": {
      "url": "https://api.elaichi.ai/mcp"
    }
  }
}

Set up per machine, so repeat it on each computer you work from.

Infisical MCP connector for Microsoft Copilot

  1. 1

    In Copilot Studio, open your agent, then Tools, Add a tool, New tool and Model Context Protocol.

  2. 2

    Paste the endpoint into Server URL, choose OAuth 2.0, then Dynamic discovery, and press Create.

    https://api.elaichi.ai/mcp
  3. 3

    Create a new connection, sign in and approve, then press Add to agent.

  4. 4

    Under Channels, open Teams and Microsoft Copilot and make the agent available in Microsoft Copilot.

Server URL
https://api.elaichi.ai/mcp
Authentication
OAuth 2.0
Type
Dynamic discovery

Microsoft Copilot was called Microsoft 365 Copilot. Keep the tool on end-user credentials, so each person signs in as themselves.

Connect Infisical to any MCP client

  1. 1

    Add the endpoint as a remote MCP server.

    https://api.elaichi.ai/mcp
  2. 2

    Sign in and approve.

{
  "mcpServers": {
    "elaichi": {
      "url": "https://api.elaichi.ai/mcp"
    }
  }
}

The Elaichi Agent already has these tools, with nothing to set up.

What teams do with Infisical through Elaichi

Ask in plain English. Each person’s AI can do only what they’re allowed to, and every action it takes in Infisical is logged.

  • Security

    Review every app connection in one pass

    Ask for a list of the 1Password, Auth0, and AWS app connections in Infisical, who they belong to, and which ones look unused, without clicking through each one.

  • Platform engineering

    Set up a new cloud connection after onboarding

    When a new AWS account comes online, create its app connection in Infisical by name and confirm it shows up alongside the existing ones.

  • DevOps

    Attach machine identity auth to a workload

    Attach Alibaba Cloud auth to a machine identity in Infisical so a pipeline can log in on its own, then check the settings by ID before the first deploy.

  • IT

    Revoke access when a service is retired

    Revoke a machine identity's auth method in Infisical and delete the app connections a decommissioned tool relied on, so nothing keeps working that should not.

  • Compliance

    Answer an auditor's question about connections

    Pull the details of a single Auth0 or 1Password app connection in Infisical by name and hand back a plain summary of what it connects and when it changed.

  • Engineering

    Bootstrap a fresh Infisical instance

    Run the admin bootstrap for a new self-hosted Infisical instance and confirm the first app connections are in place before the rest of the team signs in.

Try asking

  • “List app connections created in Infisical this month.”
  • “Which machine identities can read the production project?”
  • “Summarize secrets changed across staging projects this week.”

See all 343 Infisical tools →

What connecting Infisical gets you

6 screens from Elaichi, each doing one job for your Infisical account.

Elaichi Agent

Ask Elaichi to work across your apps.

List app connections created in Infisical this month.

Which machine identities can read the production project?

Summarize secrets changed across staging projects this week.

Also runs in Claude, ChatGPT, Cursor or Microsoft Copilot

The agent

Ask about Infisical secrets in plain language.

Questions about app connections and identities get answered from live Infisical records.

ElaichiAI apps
Claude ChatGPT Cursor Microsoft Copilot

Copy the endpoint

https://api.elaichi.ai/mcp
Client Connected by Status Last used
Claude
E

Emily Carter

• Connected 4 minutes ago
Cursor
M

Megan Brooks

• Connected 2 hours ago
ChatGPT
R

Ryan Hayes

• Connected Yesterday

AI apps

Claude, ChatGPT, Cursor and Microsoft Copilot reach Infisical here.

One org MCP endpoint over OAuth, no SDK and no shared API key.

ElaichiTools
Tool Action Description
Infisical admin bootstrap instance Action Bootstrap a fresh Infisical self-hosted instance by creating the initial super admin user, organization, and machine identity. Returns: message, user, organization, identity.token). Required: email, password, organization.
Infisical alicloud auth attach Action Attach Alibaba Cloud auth configuration onto a machine identity in Infisical. Returns: id, createdAt, updatedAt, identityId, type, allowedArns, accessTokenTTL, accessTokenMaxTTL, accessTokenNumUsesLimit, accessTokenTrustedIps, identityAliCloudAuth. Required: identity_id, allowedArns.
Infisical alicloud auth login Action Login a machine identity in Infisical using Alibaba Cloud STS GetCallerIdentity. Returns: accessToken, expiresIn, accessTokenMaxTTL, tokenType. Required: identityId, Action, Format, Version, AccessKeyId, SignatureMethod, Timestamp, SignatureVersion, SignatureNonce, Signature.
Infisical alicloud auth revoke Revoke Revoke the Alibaba Cloud auth configuration from a machine identity in Infisical. Returns: id, createdAt, updatedAt, identityId, type, allowedArns, accessTokenTTL, accessTokenMaxTTL, accessTokenNumUsesLimit, accessTokenTrustedIps, identityAliCloudAuth. Required: identity_id.
Update a Infisical alicloud auth by ID Update Update the Alibaba Cloud auth configuration on a machine identity in Infisical. Returns: id, createdAt, updatedAt, identityId, type, allowedArns, accessTokenTTL, accessTokenMaxTTL, accessTokenNumUsesLimit, accessTokenTrustedIps, identityAliCloudAuth. Required: id, allowedArns.

Tool catalog

343 Infisical tools are ready to call.

Secrets, projects, app connections and machine identities covered without custom code.

ElaichiToolboxes
Name Source template Tools Created

Platform toolbox

Infisical · projects and environments

Infisical starter 18 Mar 4, 2026

Security toolbox

Infisical · machine identities and auth methods

— 9 Mar 2, 2026

Application engineering toolbox

Infisical · secrets and folders

— 24 Feb 27, 2026

SRE toolbox

Infisical · production secret rotation

Infisical starter 6 Feb 19, 2026

Data toolbox

Infisical · warehouse credentials and app connections

— 31 Jan 30, 2026

IT operations toolbox

Infisical · members and access requests

— 12 Jan 22, 2026

Toolboxes

Every team gets its own Infisical toolbox.

Platform, security and app teams each work from a toolbox scoped to them.

ElaichiConnections
Connection Scope Status Access
IN

Infisical (Production)

Connected by Emily Carter

Personal • Active 1 team · 6 members
IN

Infisical (Staging)

Connected by Jake Morgan

Organization • Active 3 teams · 24 members
IN

Infisical (Security engineering)

Connected by Megan Brooks

Organization • Active 2 teams · 11 members
IN

Infisical (Data platform)

Connected by Tyler Reed

Personal • Needs re-auth 1 team · 3 members
IN

Infisical (Payments)

Connected by Ryan Hayes

Personal • Active Not shared
IN

Infisical (Internal tools)

Connected by Ashley Parker

Personal • Active 2 teams · 9 members

Shared connections

Teammates use Infisical without seeing a token.

Each connection shows who added it and which teams and members share it.

ElaichiAudit log
When Who What happened Type

2 minutes ago

Mar 6, 2026, 3:10 PM

E

Emily Carter

[email protected]

Restriction Created Access

8 minutes ago

Mar 6, 2026, 3:04 PM

J

Jake Morgan

[email protected]

Restriction Updated Access

14 minutes ago

Mar 6, 2026, 2:58 PM

M

Megan Brooks

[email protected]

Role Assigned Access

20 minutes ago

Mar 6, 2026, 2:52 PM

T

Tyler Reed

[email protected]

Infisical Users Updated MCP

26 minutes ago

Mar 6, 2026, 2:46 PM

R

Ryan Hayes

[email protected]

Infisical Secrets Created MCP

32 minutes ago

Mar 6, 2026, 2:40 PM

A

Ashley Parker

[email protected]

Infisical Secrets List Toolbox

Audit log

Every Infisical call is written down.

When, who, what happened, type and resource for each secret and identity touched.

From answering questions to doing the work

A trigger starts the work, inside the same permissions and the same audit log as everything else. Automations, collections and live dashboards come with the Black plan.

Infisical digest

Run 418 · started 2 minutes ago · on behalf of Emily Carter

  1. ✓

    Schedule

    Every weekday at 8:00 AM

    0.2s
  2. ✓

    Fetch secrets

    Infisical

    1.4s
  3. ✓

    Group by owner

    Transform

    0.1s
  4. ✓

    Draft the digest

    Agent step

    Ran with 4 tools, returned a structured summary

    6.2s
  5. Approve the digest

    Needs approval

    Assigned to Jake Morgan

    Approve
  6. Post the digest

    Infisical

    Queued

Automations

A schedule drives Infisical work end to end.

Six steps fetch secrets, group them, draft a digest, take approval, post back.

Infisical health

Refreshed 4 minutes ago · every 15 minutes · from the secrets collection

Live

Secrets

1,284 ↓ 12%

Projects

96 ↓ 8%

Needs attention

3 ↑ 2

Updated this week

412 ↑ 9%

Secrets created

Last 14 days

By team

Share of activity

Production 34%

Staging 27%

Security engineering 21%

Data platform 18%

Collections and dashboards

Infisical health arrives before anyone asks.

Four metrics, 14 days of secrets created and a team breakdown, refreshed on schedule.

For IT and engineering

Elaichi vs Zapier MCP vs Composio for Infisical

All three can connect Infisical to an AI assistant, and all three have admin controls. They differ in where access lives and how you pay.

Elaichi compared with Zapier MCP and Composio for Infisical, by what to check
What to check Elaichi Zapier MCP Composio
Where the AI connects One address for the whole organization. https://api.elaichi.ai/mcp A server per member, created at sign-in. An MCP endpoint per team, or an SDK.
Control over Infisical tools Allow or restrict single Infisical tools, per role or user. App and action restrictions on the account. Role permissions, down to the action.
Record of calls One audit entry per Infisical call. A History tab of tool calls. A log of every tool call.
Single sign-on SAML or OIDC, plus SCIM, on Gold. SAML on Enterprise. SAML and OIDC on Enterprise.
Price Free for one person; $15 per user per month on Gold. 2 tasks per successful call. Billed per tool call.

Sources: Zapier MCP docs, security, usage; Composio docs, gateway, enterprise, pricing. Checked September 2026.

Longer take: Zapier MCP alternative and when you don't need an MCP gateway.

Infisical tools for your AI agents

343 tools are ready to call through Elaichi's MCP endpoint the moment you connect Infisical, governed by the same roles, restrictions, and audit log as everything else in Elaichi.

Showing 223 of 343 Infisical tools here. Connect Infisical and call search_tools or tools/list over the MCP endpoint for the complete set.

Questions, answered

How do I connect Infisical to Claude?

Connect Infisical in Elaichi first, which asks you to paste an Infisical API key and nothing else. There is no OAuth application to register and no client ID or secret to generate. Then in Claude go to Customize, then Connectors, then Add, and paste https://api.elaichi.ai/mcp. Sign in to Elaichi when Claude asks and Infisical is ready to use.

Does Infisical work with ChatGPT and Cursor as well as Claude?

Yes. Once Infisical is connected in Elaichi, the same endpoint, https://api.elaichi.ai/mcp, works in Claude, ChatGPT, Cursor, Microsoft Copilot, any other MCP client, and the Elaichi Agent. You connect Infisical once and every client picks it up.

What can an AI agent actually do with my Infisical data?

With Infisical connected, an agent can list your app connections to services like AWS, 1Password, and Auth0, look one up by name or ID, create or update one, and remove one you no longer need. It can also attach, update, or revoke cloud auth methods on machine identities and run the admin bootstrap for a new instance. Because Infisical exposes several hundred actions, short, specific asks such as "list the AWS app connections" get better results than long paragraphs.

Does connecting Infisical give the AI everything in my organization?

No. Every call to Infisical runs with the access of the API key you connected and the Elaichi account of the person making the request, so the agent sees only what that key can already see in Infisical. Elaichi can narrow that further with restrictions, and it never widens access beyond what Infisical itself allows.

Can my team share one Infisical connection?

Yes. One person connects Infisical in Elaichi and shares the connection with a team, and nobody else ever handles the API key. Each teammate still signs in to Elaichi as themselves, so the audit log names the person who made each Infisical change, not the connection.

Can I stop an agent from deleting or changing things in Infisical?

Yes. Restrictions in Elaichi apply per action, so you can allow reading Infisical app connections while restricting deletion or revocation. A restricted action still appears in Elaichi's tool search, flagged as restricted, but Claude, ChatGPT, Cursor, Microsoft Copilot, or any other client cannot run it, whatever the prompt says.

What happens to an Infisical connection when someone leaves?

Offboarding the person in Elaichi ends their access to Infisical through every client at once. A shared Infisical connection keeps working for everyone else on the team. If you want to remove Infisical entirely, disconnecting it once in Elaichi removes it from Claude, ChatGPT, Cursor, Microsoft Copilot, and every other client at the same time.

Does the Infisical MCP connector work with Gemini, Codex, Claude Code or other MCP clients?

Yes. Infisical is reached over the same MCP endpoint every client uses, so anything that speaks MCP can call it — Gemini, Codex, Claude Code, Windsurf, Cline, Zed and OpenCode among them — alongside Claude, ChatGPT, Cursor, Microsoft Copilot, and the Elaichi Agent. The tools on offer and the access behind them are identical whichever client asks. Only the setup screen differs.

Is Elaichi an alternative to Zapier MCP for Infisical?

Yes. Both let Claude, ChatGPT or Cursor use Infisical. Zapier MCP fits a team that already automates in Zapier, since each person signs in and acts as themselves in that account. Elaichi fits when IT wants one address for the whole company, per-tool rules by role, and a record of every Infisical call.

How is Elaichi different from Composio for Infisical?

Composio gives AI agents tools and sign-in handling across 1,000+ apps, for developers building agents or people using an assistant, billed per tool call. Elaichi gives a company's own people governed access to Infisical: one address, restrictions per role or user, and $15 per user per month. Both have role permissions and a log of every call.

Put Infisical in front of your team

14 days of Black, no credit card. Connect it once and pick what each team can call.

When the trial ends, nothing is deleted. You move to the free Personal plan, and connections, roles and the audit log stay where they are.

Add one link to your AI app

The same link for everyone on your team.

https://api.elaichi.ai/mcp
  • ChatGPT
  • Claude
  • Cursor
  • Microsoft Copilot