LoginSign Up
← Back to all sparks
I

Infisical

INFRA · APIS
Velocity5.0

Open-source secret management platform for developers

infisical.com ↗

Infisical tightens SSO and adds an MCP allowlist to Agent Vault in its latest weekly release.

secrets-managementai-agentsmcpssodeveloper-security
◆Current state
Infisical tags a release every few days. Batched secret and folder edits are now always on in the Secrets Overview, and Agent Vault, its credential and proxy manager for AI agents, keeps gaining controls. v0.167.6 adds an MCP tool allowlist, trusts identity-provider MFA for SAML and OIDC, binds SSO sessions to the issuing org, and lets deleted projects be restored within a grace period.
◆Where it's heading
Two threads run through the releases: agent credential management, which now reaches MCP tool scoping, and enterprise hardening across SSO, PAM and code signing. Dynamic secrets keep widening, with Kafka in October and CockroachDB now.
◆Prediction
Expect Agent Vault to get more policy controls over what agents can call, alongside further dynamic-secret targets.

◆Recent moves

  1. 1d ago

    Infisical v0.167.6: Agent Vault MCP allowlist, SSO MFA trust

    A broad release: Agent Vault gains an MCP tool allowlist and proxy descriptions, SSO now trusts IdP-side MFA and binds sessions to the issuing org, deleted projects get a restore grace period, and CockroachDB joins dynamic secrets. It advances both the agent-credential and enterprise-hardening threads at once.

    View source ↗
  2. 2d ago

    Infisical v0.167.5 drops react-select, fixes org links

    A cleanup release that removes the react-select dependency and fixes org-level links; part of the frontend consolidation running through recent versions.

    View source ↗
  3. 8d ago

    Infisical v0.167.4 makes batched secret edits default

    Batched secret changes become always-on in the Secrets Overview, so edits across environments land as one commit, finishing a feature built over the previous two releases.

    View source ↗
  4. 9d ago

    Infisical v0.167.3 adds batch commits and Agent Vault credentials

    Adds the API route behind batched secret and folder changes and lets Agent Vault members supply personal credential values, two threads that define the current cycle.

    View source ↗
  5. 11d ago

    Infisical v0.167.2 adds Agent Vault proxy tokens

    Permissions can now be granted from search, secret scanning emits tracking events, and Agent Vault can start proxies from a proxy token.

    View source ↗
  6. 12d ago

    Infisical v0.167.1 fixes Secrets Overview search

    Fixes to overview search plus test and docs cleanup; maintenance between feature releases.

    View source ↗