Infisical é uma plataforma open-source de gerenciamento de secrets que ajuda equipes a centralizar e gerenciar secrets de aplicação, variáveis de ambiente e dados de configuração sensíveis em toda a infraestrutura. Esta integração traz as capacidades de gerenciamento de secrets do Infisical diretamente para os fluxos de trabalho Zoen.
Com o Infisical no Zoen, você pode:
- Listar secrets: Recupere todos os secrets de um ambiente de projeto com filtragem por path, tags e suporte a subdiretórios recursivos
- Obter um secret: Busque um secret específico pelo nome, com pinagem de versão opcional e expansão de referências de secret
- Criar secrets: Adicione novos secrets a qualquer ambiente de projeto com suporte a comentários, paths e atribuição de tags
- Atualizar secrets: Modifique valores, comentários, nomes e tags de secrets existentes
- Excluir secrets: Remova secrets de um ambiente de projeto
No Zoen, a integração do Infisical permite que seus agentes gerenciem secrets de forma programática como parte de fluxos de trabalho automatizados — por exemplo, rotacionar credenciais, sincronizar variáveis de ambiente entre ambientes ou auditar o uso de secrets. Basta configurar o bloco Infisical com sua API key, selecionar a operação e informar o project ID e o environment slug para começar.
Integrate Infisical into your workflow. List, get, create, update, and delete secrets across project environments.
List all secrets in a project environment. Returns secret keys, values, comments, tags, and metadata.
| Parameter | Type | Required | Description |
|---|
apiKey | string | Yes | Infisical API token |
baseUrl | string | No | Infisical instance URL (default: "https://us.infisical.com"\). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. |
projectId | string | Yes | The ID of the project to list secrets from |
environment | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
secretPath | string | No | The path of the secrets (default: "/") |
recursive | boolean | No | Whether to fetch secrets recursively from subdirectories |
expandSecretReferences | boolean | No | Whether to expand secret references (default: true) |
viewSecretValue | boolean | No | Whether to include secret values in the response (default: true) |
includeImports | boolean | No | Whether to include imported secrets (default: true) |
tagSlugs | string | No | Comma-separated tag slugs to filter secrets by |
| Parameter | Type | Description |
|---|
secrets | array | Array of secrets |
↳ id | string | Secret ID |
↳ workspace | string | Workspace/project ID |
↳ secretKey | string | Secret name/key |
↳ secretValue | string | Secret value |
↳ secretComment | string | Secret comment |
↳ secretPath | string | Secret path |
↳ version | number | Secret version |
↳ type | string | Secret type (shared or personal) |
↳ environment | string | Environment slug |
↳ secretValueHidden | boolean | Whether the secret value was hidden in the response |
↳ isRotatedSecret | boolean | Whether the secret is managed by secret rotation |
↳ rotationId | string | Secret rotation ID |
↳ secretReminderNote | string | Rotation reminder note |
↳ secretReminderRepeatDays | number | Rotation reminder interval in days |
↳ skipMultilineEncoding | boolean | Whether multiline encoding is skipped for this secret |
↳ tags | array | Tags attached to the secret |
↳ id | string | Tag ID |
↳ slug | string | Tag slug |
↳ color | string | Tag color |
↳ name | string | Tag name |
↳ secretMetadata | array | Custom metadata key-value pairs |
↳ key | string | Metadata key |
↳ value | string | Metadata value |
↳ isEncrypted | boolean | Whether the metadata value is encrypted |
↳ actor | object | Identity that last modified the secret |
↳ actorId | string | Actor ID |
↳ actorType | string | Actor type |
↳ name | string | Actor name |
↳ membershipId | string | Membership ID |
↳ groupId | string | Group ID |
↳ createdAt | string | Creation timestamp |
↳ updatedAt | string | Last update timestamp |
count | number | Total number of secrets returned |
Retrieve a single secret by name from a project environment.
| Parameter | Type | Required | Description |
|---|
apiKey | string | Yes | Infisical API token |
baseUrl | string | No | Infisical instance URL (default: "https://us.infisical.com"\). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. |
projectId | string | Yes | The ID of the project |
environment | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
secretName | string | Yes | The name of the secret to retrieve |
secretPath | string | No | The path of the secret (default: "/") |
version | number | No | Specific version of the secret to retrieve |
type | string | No | Secret type: "shared" or "personal" (default: "shared") |
viewSecretValue | boolean | No | Whether to include the secret value in the response (default: true) |
expandSecretReferences | boolean | No | Whether to expand secret references (default: true) |
| Parameter | Type | Description |
|---|
secret | object | The retrieved secret |
↳ id | string | Secret ID |
↳ workspace | string | Workspace/project ID |
↳ secretKey | string | Secret name/key |
↳ secretValue | string | Secret value |
↳ secretComment | string | Secret comment |
↳ secretPath | string | Secret path |
↳ version | number | Secret version |
↳ type | string | Secret type (shared or personal) |
↳ environment | string | Environment slug |
↳ secretValueHidden | boolean | Whether the secret value was hidden in the response |
↳ isRotatedSecret | boolean | Whether the secret is managed by secret rotation |
↳ rotationId | string | Secret rotation ID |
↳ secretReminderNote | string | Rotation reminder note |
↳ secretReminderRepeatDays | number | Rotation reminder interval in days |
↳ skipMultilineEncoding | boolean | Whether multiline encoding is skipped for this secret |
↳ tags | array | Tags attached to the secret |
↳ id | string | Tag ID |
↳ slug | string | Tag slug |
↳ color | string | Tag color |
↳ name | string | Tag name |
↳ secretMetadata | array | Custom metadata key-value pairs |
↳ key | string | Metadata key |
↳ value | string | Metadata value |
↳ isEncrypted | boolean | Whether the metadata value is encrypted |
↳ actor | object | Identity that last modified the secret |
↳ actorId | string | Actor ID |
↳ actorType | string | Actor type |
↳ name | string | Actor name |
↳ membershipId | string | Membership ID |
↳ groupId | string | Group ID |
↳ createdAt | string | Creation timestamp |
↳ updatedAt | string | Last update timestamp |
Create a new secret in a project environment.
| Parameter | Type | Required | Description |
|---|
apiKey | string | Yes | Infisical API token |
baseUrl | string | No | Infisical instance URL (default: "https://us.infisical.com"\). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. |
projectId | string | Yes | The ID of the project |
environment | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
secretName | string | Yes | The name of the secret to create |
secretValue | string | Yes | The value of the secret |
secretPath | string | No | The path for the secret (default: "/") |
secretComment | string | No | A comment for the secret |
type | string | No | Secret type: "shared" or "personal" (default: "shared") |
tagIds | string | No | Comma-separated tag IDs to attach to the secret |
| Parameter | Type | Description |
|---|
secret | object | The created secret |
↳ id | string | Secret ID |
↳ workspace | string | Workspace/project ID |
↳ secretKey | string | Secret name/key |
↳ secretValue | string | Secret value |
↳ secretComment | string | Secret comment |
↳ secretPath | string | Secret path |
↳ version | number | Secret version |
↳ type | string | Secret type (shared or personal) |
↳ environment | string | Environment slug |
↳ secretValueHidden | boolean | Whether the secret value was hidden in the response |
↳ isRotatedSecret | boolean | Whether the secret is managed by secret rotation |
↳ rotationId | string | Secret rotation ID |
↳ secretReminderNote | string | Rotation reminder note |
↳ secretReminderRepeatDays | number | Rotation reminder interval in days |
↳ skipMultilineEncoding | boolean | Whether multiline encoding is skipped for this secret |
↳ tags | array | Tags attached to the secret |
↳ id | string | Tag ID |
↳ slug | string | Tag slug |
↳ color | string | Tag color |
↳ name | string | Tag name |
↳ secretMetadata | array | Custom metadata key-value pairs |
↳ key | string | Metadata key |
↳ value | string | Metadata value |
↳ isEncrypted | boolean | Whether the metadata value is encrypted |
↳ actor | object | Identity that last modified the secret |
↳ actorId | string | Actor ID |
↳ actorType | string | Actor type |
↳ name | string | Actor name |
↳ membershipId | string | Membership ID |
↳ groupId | string | Group ID |
↳ createdAt | string | Creation timestamp |
↳ updatedAt | string | Last update timestamp |
Update an existing secret in a project environment.
| Parameter | Type | Required | Description |
|---|
apiKey | string | Yes | Infisical API token |
baseUrl | string | No | Infisical instance URL (default: "https://us.infisical.com"\). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. |
projectId | string | Yes | The ID of the project |
environment | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
secretName | string | Yes | The name of the secret to update |
secretValue | string | No | The new value for the secret |
secretPath | string | No | The path of the secret (default: "/") |
secretComment | string | No | A comment for the secret |
newSecretName | string | No | New name for the secret (to rename it) |
type | string | No | Secret type: "shared" or "personal" (default: "shared") |
tagIds | string | No | Comma-separated tag IDs to set on the secret |
| Parameter | Type | Description |
|---|
secret | object | The updated secret |
↳ id | string | Secret ID |
↳ workspace | string | Workspace/project ID |
↳ secretKey | string | Secret name/key |
↳ secretValue | string | Secret value |
↳ secretComment | string | Secret comment |
↳ secretPath | string | Secret path |
↳ version | number | Secret version |
↳ type | string | Secret type (shared or personal) |
↳ environment | string | Environment slug |
↳ secretValueHidden | boolean | Whether the secret value was hidden in the response |
↳ isRotatedSecret | boolean | Whether the secret is managed by secret rotation |
↳ rotationId | string | Secret rotation ID |
↳ secretReminderNote | string | Rotation reminder note |
↳ secretReminderRepeatDays | number | Rotation reminder interval in days |
↳ skipMultilineEncoding | boolean | Whether multiline encoding is skipped for this secret |
↳ tags | array | Tags attached to the secret |
↳ id | string | Tag ID |
↳ slug | string | Tag slug |
↳ color | string | Tag color |
↳ name | string | Tag name |
↳ secretMetadata | array | Custom metadata key-value pairs |
↳ key | string | Metadata key |
↳ value | string | Metadata value |
↳ isEncrypted | boolean | Whether the metadata value is encrypted |
↳ actor | object | Identity that last modified the secret |
↳ actorId | string | Actor ID |
↳ actorType | string | Actor type |
↳ name | string | Actor name |
↳ membershipId | string | Membership ID |
↳ groupId | string | Group ID |
↳ createdAt | string | Creation timestamp |
↳ updatedAt | string | Last update timestamp |
Delete a secret from a project environment.
| Parameter | Type | Required | Description |
|---|
apiKey | string | Yes | Infisical API token |
baseUrl | string | No | Infisical instance URL (default: "https://us.infisical.com"\). Use "https://eu.infisical.com" for EU Cloud or your self-hosted URL. |
projectId | string | Yes | The ID of the project |
environment | string | Yes | The environment slug (e.g., "dev", "staging", "prod") |
secretName | string | Yes | The name of the secret to delete |
secretPath | string | No | The path of the secret (default: "/") |
type | string | No | Secret type: "shared" or "personal" (default: "shared") |
| Parameter | Type | Description |
|---|
secret | object | The deleted secret |
↳ id | string | Secret ID |
↳ workspace | string | Workspace/project ID |
↳ secretKey | string | Secret name/key |
↳ secretValue | string | Secret value |
↳ secretComment | string | Secret comment |
↳ secretPath | string | Secret path |
↳ version | number | Secret version |
↳ type | string | Secret type (shared or personal) |
↳ environment | string | Environment slug |
↳ secretValueHidden | boolean | Whether the secret value was hidden in the response |
↳ isRotatedSecret | boolean | Whether the secret is managed by secret rotation |
↳ rotationId | string | Secret rotation ID |
↳ secretReminderNote | string | Rotation reminder note |
↳ secretReminderRepeatDays | number | Rotation reminder interval in days |
↳ skipMultilineEncoding | boolean | Whether multiline encoding is skipped for this secret |
↳ tags | array | Tags attached to the secret |
↳ id | string | Tag ID |
↳ slug | string | Tag slug |
↳ color | string | Tag color |
↳ name | string | Tag name |
↳ secretMetadata | array | Custom metadata key-value pairs |
↳ key | string | Metadata key |
↳ value | string | Metadata value |
↳ isEncrypted | boolean | Whether the metadata value is encrypted |
↳ actor | object | Identity that last modified the secret |
↳ actorId | string | Actor ID |
↳ actorType | string | Actor type |
↳ name | string | Actor name |
↳ membershipId | string | Membership ID |
↳ groupId | string | Group ID |
↳ createdAt | string | Creation timestamp |
↳ updatedAt | string | Last update timestamp |