{
"canonical_url": "infisical.com/.well-known/mcp/server-card.json",
"capabilities": [
"list-projects",
"create-project",
"create-environment",
"create-folder",
"list-secrets",
"get-secret",
"create-secret",
"update-secret",
"delete-secret",
"invite-members-to-project"
],
"category": null,
"classification": {
"matched": {
"cybersecurity": [
"secrets"
],
"technology": [
"api",
"mcp"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": null,
"compliance": [
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://infisical.com/",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "af0c11162930ee9d0252e96f72cd61a17ec588242bfc298dc7a5645e5ef9baff",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:52Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://infisical.com/",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "af0c11162930ee9d0252e96f72cd61a17ec588242bfc298dc7a5645e5ef9baff",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:52Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
}
],
"deployment": null,
"description": "Official MCP server. Runs locally over stdio via `npx -y @infisical/mcp` and authenticates as an Infisical machine identity.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"cybersecurity": {
"components": {
"adoption": null,
"docs": 10.0,
"domain_fit": 34.0,
"ecosystem": 8.5,
"governance": 3.0,
"health": null,
"trust": 21.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.34,
"evidence_coverage": 0.65,
"governance_credited": {
"soc2": 0.15
},
"profile": "security",
"rank": null,
"score": 37.1,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": [
"adoption",
"health"
]
},
"technology": {
"components": {
"adoption": null,
"docs": 10.0,
"domain_fit": 56.4,
"ecosystem": 8.5,
"governance": 3.0,
"health": null,
"trust": 21.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.564,
"evidence_coverage": 0.5,
"governance_credited": {
"soc2": 0.15
},
"profile": "technology",
"rank": null,
"score": 35.9,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": [
"adoption",
"health"
]
}
},
"external_ids": {
"ard": "urn:air:infisical.com:server:mcp"
},
"first_seen": "2026-10-26T12:23:06Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_2eed6a633897764e",
"identity": {
"evidence": [
"standards_metadata_at_publisher_domain"
],
"rules_version": "identity-1.1",
"tier": 2
},
"issues": {
"advisories": 0,
"cves": 0,
"incidents": 0,
"links": [],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:23:06Z",
"license": null,
"name": "Infisical MCP server",
"news": [],
"news_checked": true,
"protocols": {
"a2a": {
"status": "unknown"
},
"ard": {
"identifier": "urn:air:infisical.com:server:mcp",
"manifest_url": "https://infisical.com/.well-known/ard.json",
"media_type": "application/mcp-server-card+json",
"parser_version": "ard-0.91",
"status": "verified",
"trust_manifest": "absent"
},
"mcp": {
"server_card_url": "https://infisical.com/.well-known/mcp/server-card.json",
"status": "claimed",
"via": "ard-entry"
}
},
"publisher_domain": "infisical.com",
"representative_queries": [
"read the DATABASE_URL secret from my staging environment",
"add an API key to the production environment of my Infisical project",
"list the projects in my Infisical organization"
],
"resource_type": "mcp_server",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:44:34Z",
"cves": 0,
"source": "nvd",
"tier": 1
},
"signals": {},
"slug": "infisical-com-infisical-mcp-server",
"sources": [
{
"payload_hash": "f26103b97771c26f132ff878ef8e9d2c836514a59ed36b9f3e8712e92520cde3",
"retrieved_at": "2026-10-26T12:23:06Z",
"system": "ard",
"url": "https://infisical.com/.well-known/ard.json"
}
],
"tags": [
"mcp",
"secrets-management",
"api"
],
"tenant": null,
"traces": [
{
"agent_version": null,
"bundle": "bundles/tr_st_2eed6a633897764e_9a435070",
"checked_on": null,
"date": "2026-10-11",
"format": "bundle",
"harness_version": "probe-1.0",
"id": "tr_st_2eed6a633897764e_9a435070",
"kind": "self_test",
"notes": "Produced automatically on every refresh; a new bundle is written only when the observation changes",
"observed": {
"actions": [
"served Agentic Resource Discovery (ARD) document"
],
"approval": null,
"egress": false,
"entry": "GET on the publisher's well-known discovery paths",
"outcome": "ARD verified",
"refused": null,
"secrets_touched": false
},
"reviewer": null,
"scenario": "Fetch and validate the ARD manifest, A2A agent card and MCP server card at the publisher's well-known paths",
"scope": "product",
"sha256": "sha256:7a14a1e36f45b4ff558573e5a15be02ed18055ce64d580753abfecfa36092550",
"source": "AgentDossier refresh",
"tier": 1,
"title": "Registry probe of Infisical MCP server's discovery endpoints",
"url": "https://sushegaad.github.io/AgentDossier/traces/tr_st_2eed6a633897764e_9a435070/",
"vendor_response": null
}
],
"trust": {
"compliance": 5,
"identity": 2,
"issues": 1,
"protocols": 1,
"security": 1,
"traces": 1,
"vendor_compliance": 4
},
"url": "https://infisical.com/.well-known/mcp/server-card.json",
"vendor": "infisical.com"
}