Core APIs

All API calls authenticate with the INFISICAL_TOKEN environment variable via Bearer token.

1. Fetch a Single Secret by Name

Retrieve a secret by its key name from a specific Infisical project and environment.

curl -s -X GET "https://app.infisical.com/api/v3/secrets/raw/<SECRET_NAME>?workspaceId=<workspace-id>&environment=<env-slug>&secretPath=/" --header "Authorization: Bearer $INFISICAL_TOKEN" | jq '{key: .secret.secretKey, value: .secret.secretValue, environment: .secret.environment}'

Replace <SECRET_NAME> with the exact secret key, <workspace-id> with your Infisical project ID (found in project settings), and <env-slug> with the environment slug (e.g., dev, staging, prod).

2. List All Secrets in a Project/Environment

curl -s -X GET "https://app.infisical.com/api/v3/secrets/raw?workspaceId=<workspace-id>&environment=<env-slug>&secretPath=/" --header "Authorization: Bearer $INFISICAL_TOKEN" | jq '.secrets[] | {key: .secretKey, value: .secretValue, environment: .environment}'