Rest in peace, .env. You served us well but you gotta go. Infisical fetches secrets at runtime so they never touch disk. CLI works with any language + SDKs and infra integrations. Docs below.
A credential an AI agent can read, is a credential it can leak.
Introducing Agent Vault: a new Infisical product that lets Claude Code, Codex, and other agents call the APIs and services they need, without holding real credentials.
With Agent Vault:
> Your agents work as they normally do, with no code changes
> A prompt-injected agent can only reach preapproved HTTP services, down to exact methods and paths
> Agent sessions expire on a schedule you set, and every request is logged
Agent Vault is in preview now, on Infisical Cloud or self-hosted.
> Try it now: https://t.co/QDE6xua0sg > Docs: https://t.co/muyBmGNaXm
> Weโll also be doing a live demo of Agent Vault on October 21: https://t.co/BwCa5mirmX
If your agents run in @daytonaio sandboxes, you can now manage their keys in Infisical alongside every other secret your team uses!
Infisical now syncs copies of secrets straight into Daytona's secret store. Daytona keeps the real values out of the sandbox, and Infisical keeps the secret values current. Rotate a key in Infisical and every sandbox that references it gets the new value on the next sync, with no changes to your create calls.
Available on all plans, including free!