Infisical

Load secrets from Infisical Universal Auth.

Provider name: infisical.

{
  "provider": "infisical",
  "client-id": "{env:INFISICAL_CLIENT_ID}",
  "client-secret": "{env:INFISICAL_CLIENT_SECRET}",
  "project-id": "{env:INFISICAL_PROJECT_ID}",
  "environment": "dev"
}

Options

Option	Fallback	Default
`client-id`	`INFISICAL_CLIENT_ID`	required
`client-secret`	`INFISICAL_CLIENT_SECRET`	required
`project-id`	`INFISICAL_PROJECT_ID`	required
`site-url`	`INFISICAL_SITE_URL`	`https://app.infisical.com`
`environment`	`INFISICAL_ENVIRONMENT`	`dev`

The provider authenticates through /api/v1/auth/universal-auth/login, then reads raw secrets from /api/v3/secrets/raw with secretPath=/.

Use a file provider earlier in the chain if you want to load Infisical credentials from .env.