{
"canonical_url": "infisical.com/ai-agents.md",
"capabilities": [],
"category": null,
"classification": {
"matched": {
"regulatory": [
"audit"
],
"technology": [
"infrastructure"
]
},
"taxonomy_version": "sar-taxonomy-1.0"
},
"commercial": null,
"compliance": [
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://infisical.com/",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "af0c11162930ee9d0252e96f72cd61a17ec588242bfc298dc7a5645e5ef9baff",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:52Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 5
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://infisical.com/",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "af0c11162930ee9d0252e96f72cd61a17ec588242bfc298dc7a5645e5ef9baff",
"period_end": null,
"retrieved_at": "2026-10-26T12:29:52Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
}
],
"deployment": null,
"description": "What the platform does for agents rather than how to install it, covering Agent Vault for third-party credentials, brokered PAM sessions on your own infrastructure, and agent identity and audit.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"regulatory": {
"components": {
"adoption": null,
"docs": 9.0,
"domain_fit": 34.0,
"ecosystem": 4.6,
"governance": 3.0,
"health": null,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.34,
"evidence_coverage": 0.75,
"governance_credited": {
"soc2": 0.15
},
"profile": "regulated",
"rank": null,
"score": 34.8,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": [
"adoption",
"health"
]
},
"technology": {
"components": {
"adoption": null,
"docs": 9.0,
"domain_fit": 34.0,
"ecosystem": 4.6,
"governance": 3.0,
"health": null,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 0.34,
"evidence_coverage": 0.5,
"governance_credited": {
"soc2": 0.15
},
"profile": "technology",
"rank": null,
"score": 28.5,
"score_version": "sar-score-2.0",
"source": "classifier",
"unknown": [
"adoption",
"health"
]
}
},
"external_ids": {
"ard": "urn:air:infisical.com:doc:ai-agents"
},
"first_seen": "2026-10-26T12:23:06Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_9e04854408c60aab",
"identity": {
"evidence": [
"standards_metadata_at_publisher_domain"
],
"rules_version": "identity-1.1",
"tier": 2
},
"issues": {
"advisories": 0,
"cves": 0,
"incidents": 0,
"links": [],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:23:06Z",
"license": null,
"name": "Infisical for AI agents",
"news": [],
"news_checked": true,
"protocols": {
"a2a": {
"status": "unknown"
},
"ard": {
"identifier": "urn:air:infisical.com:doc:ai-agents",
"manifest_url": "https://infisical.com/.well-known/ard.json",
"media_type": "text/markdown",
"parser_version": "ard-0.91",
"status": "verified",
"trust_manifest": "absent"
},
"mcp": {
"status": "unknown"
}
},
"publisher_domain": "infisical.com",
"representative_queries": [
"how do I give an AI agent an API key without letting it see the key",
"how do I stop prompt injection from exfiltrating credentials",
"how do I give an AI agent scoped access to a production database"
],
"resource_type": "agent",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:44:40Z",
"cves": 0,
"source": "nvd",
"tier": 1
},
"signals": {},
"slug": "infisical-com-infisical-for-ai-agents",
"sources": [
{
"payload_hash": "a3a08de50c7c3af3a0d1b58a5704ef2a873115d051e2c14a9f39906b9ffe9784",
"retrieved_at": "2026-10-26T12:23:06Z",
"system": "ard",
"url": "https://infisical.com/.well-known/ard.json"
}
],
"tags": [
"documentation",
"start-here"
],
"tenant": null,
"traces": [
{
"agent_version": null,
"bundle": "bundles/tr_st_9e04854408c60aab_3f869e69",
"checked_on": null,
"date": "2026-10-11",
"format": "bundle",
"harness_version": "probe-1.0",
"id": "tr_st_9e04854408c60aab_3f869e69",
"kind": "self_test",
"notes": "Produced automatically on every refresh; a new bundle is written only when the observation changes",
"observed": {
"actions": [
"served Agentic Resource Discovery (ARD) document"
],
"approval": null,
"egress": false,
"entry": "GET on the publisher's well-known discovery paths",
"outcome": "ARD verified",
"refused": null,
"secrets_touched": false
},
"reviewer": null,
"scenario": "Fetch and validate the ARD manifest, A2A agent card and MCP server card at the publisher's well-known paths",
"scope": "product",
"sha256": "sha256:fd4736ec9fceece047ee1a75ab89558aedc8f8ca0e05b6c1011e5e26573681f4",
"source": "AgentDossier refresh",
"tier": 1,
"title": "Registry probe of Infisical for AI agents's discovery endpoints",
"url": "https://sushegaad.github.io/AgentDossier/traces/tr_st_9e04854408c60aab_3f869e69/",
"vendor_response": null
}
],
"trust": {
"compliance": 5,
"identity": 2,
"issues": 1,
"protocols": 1,
"security": 1,
"traces": 1,
"vendor_compliance": 4
},
"url": "https://infisical.com/ai-agents.md",
"vendor": "infisical.com"
}