LoginSign Up
← Back to all sparks
I

Infisical

INFRA · APIS
Velocity5.0

Open-source secret management platform for developers

infisical.com ↗

Infisical's Agent Vault learns to find services, with database and SSH access built in.

secrets-managementai-agentsagent-vaultpkiaccess-control
◆Current state
Infisical released v0.167.9 and v0.167.10 on November 13. v0.167.9 is a large release: Agent Vault adds service discovery, service descriptions, a built-in skill, PostgreSQL, MySQL and SSH services, MCP templates for six more providers and services packaged into access bundles. It also publishes KMS public keys as a JWKS, pins outbound connections to validated IPs and applies approval policies to certificate renewals. v0.167.10 lets users request a narrower path inside a glob access policy.
◆Where it's heading
Agent Vault, Infisical's credential broker for AI agents, gets new capability in nearly every release, moving from proxy tokens and MCP allowlists toward a catalog of services agents can discover and reach. Alongside it, the PKI, KMS and access-request features keep filling enterprise gaps. Releases come every two to four days.
◆Prediction
Expect more Agent Vault service types and MCP templates, and access bundles to become the main way Agent Vault permissions are granted.

◆Recent moves

  1. 21h ago

    v0.167.10

    Access requests can now target a narrower path inside a glob policy, and self-hosted webhook alerts can use HTTP and internal addresses. A small release that refines least-privilege requests after the larger v0.167.9.

    View source ↗
  2. 1d ago

    Infisical v0.167.9: Agent Vault service discovery, DB and SSH

    Agent Vault gets service discovery, a built-in skill, PostgreSQL, MySQL and SSH services and six more MCP templates, with services packaged into access bundles. Combined with JWKS for KMS keys and IP pinning for outbound URLs, it is the broadest Agent Vault step since its MCP allowlist.

    View source ↗
  3. 3d ago

    Infisical v0.167.8: billing management, PKI CSR import

    Billing gets a subscriptions list and in-sheet plan changes, PKI import accepts a CSR so renewals keep the key pair, and PAM adds CockroachDB. Reading audit logs now requires the audit-log entitlement.

    View source ↗
  4. 5d ago

    Infisical v0.167.7: Agent Vault access management, E2B guide

    Agent Vault gets inline access management, inline services on sessions, and a proxy CA download with an E2B guide. Secrets quick-add now checks duplicate names server-side. It continues the weekly build-out of the agent credential product.

    View source ↗
  5. 10d ago

    Infisical v0.167.6: Agent Vault MCP allowlist, SSO MFA trust

    A broad release: Agent Vault gains an MCP tool allowlist and proxy descriptions, SSO now trusts IdP-side MFA and binds sessions to the issuing org, deleted projects get a restore grace period, and CockroachDB joins dynamic secrets. It advances both the agent-credential and enterprise-hardening threads at once.

    View source ↗
  6. 11d ago

    Infisical v0.167.5 drops react-select, fixes org links

    A cleanup release that removes the react-select dependency and fixes org-level links; part of the frontend consolidation running through recent versions.

    View source ↗