Infisical Identity Specific Privileges V2 API
The Identity Specific Privileges V2 API from Infisical — 3 operation(s) for identity specific privileges v2.
Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/infisical-identity-specific-privileges-v2-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Infisical Admin Identity Specific Privileges V2 API
description: List of all available APIs that can be consumed
version: 0.0.1
servers:
- url: https://us.infisical.com
description: Production server (US)
- url: https://eu.infisical.com
description: Production server (EU)
- url: http://localhost:8080
description: Local server
tags:
- name: Identity Specific Privileges V2
paths:
/api/v2/identity-project-additional-privilege:
post:
operationId: createIdentityProjectAdditionalPrivilege
tags:
- Identity Specific Privileges V2
description: Add an additional privilege for identity.
requestBody:
required: true
content:
application/json:
schema:
type: object
properties:
identityId:
type: string
minLength: 1
description: The ID of the machine identity to create the privilege for.
projectId:
type: string
minLength: 1
description: The ID of the project of the identity in.
slug:
type: string
minLength: 1
maxLength: 60
description: The slug of the privilege to create.
permissions:
type: array
items:
anyOf:
- type: object
properties:
subject:
type: string
enum:
- secrets
description: The entity this permission pertains to.
inverted:
type: boolean
description: Whether rule allows or forbids.
action:
anyOf:
- type: string
enum:
- read
- describeSecret
- readValue
- create
- edit
- delete
- type: array
items:
type: string
enum:
- read
- describeSecret
- readValue
- create
- edit
- delete
minItems: 1
description: Describe what action an entity can take.
conditions:
type: object
properties:
environment:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
secretPath:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
secretName:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
secretTags:
type: object
properties:
$in:
type: array
items:
type: string
minLength: 1
$all:
type: array
items:
type: string
minLength: 1
additionalProperties: false
eventType:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- secret-folders
description: The entity this permission pertains to.
inverted:
type: boolean
description: Whether rule allows or forbids.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
minItems: 1
description: Describe what action an entity can take.
conditions:
type: object
properties:
environment:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
secretPath:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- secret-imports
description: The entity this permission pertains to.
inverted:
type: boolean
description: Whether rule allows or forbids.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
minItems: 1
description: Describe what action an entity can take.
conditions:
type: object
properties:
environment:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
secretPath:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- dynamic-secrets
description: The entity this permission pertains to.
inverted:
type: boolean
description: Whether rule allows or forbids.
action:
anyOf:
- type: string
enum:
- read-root-credential
- create-root-credential
- edit-root-credential
- delete-root-credential
- lease
- type: array
items:
type: string
enum:
- read-root-credential
- create-root-credential
- edit-root-credential
- delete-root-credential
- lease
minItems: 1
description: Describe what action an entity can take.
conditions:
type: object
properties:
environment:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
secretPath:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
metadata:
type: object
properties:
$elemMatch:
type: object
properties:
key:
type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
value:
type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
required:
- $elemMatch
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- identity
description: The entity this permission pertains to.
inverted:
type: boolean
description: Whether rule allows or forbids.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- grant-privileges
- assign-role
- assign-additional-privileges
- assume-privileges
- revoke-auth
- create-token
- get-token
- delete-token
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
- grant-privileges
- assign-role
- assign-additional-privileges
- assume-privileges
- revoke-auth
- create-token
- get-token
- delete-token
minItems: 1
description: Describe what action an entity can take.
conditions:
type: object
properties:
identityId:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
assignableRole:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
assignableSubject:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
assignableAction:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
$glob:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- ssh-hosts
description: The entity this permission pertains to.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- issue-host-cert
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
- issue-host-cert
minItems: 1
description: Describe what action an entity can take.
inverted:
type: boolean
description: Whether rule allows or forbids.
conditions:
type: object
properties:
hostname:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$glob:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- pki-subscribers
description: The entity this permission pertains to.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- issue-cert
- list-certs
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
- issue-cert
- list-certs
minItems: 1
description: Describe what action an entity can take.
inverted:
type: boolean
description: Whether rule allows or forbids.
conditions:
type: object
properties:
name:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$glob:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
additionalProperties: false
description: When specified, only matching conditions will be allowed to access given resource.
required:
- subject
- action
additionalProperties: false
- type: object
properties:
subject:
type: string
enum:
- certificate-templates
description: The entity this permission pertains to.
action:
anyOf:
- type: string
enum:
- read
- create
- edit
- delete
- issue-cert
- list-certs
- type: array
items:
type: string
enum:
- read
- create
- edit
- delete
- issue-cert
- list-certs
minItems: 1
description: Describe what action an entity can take.
inverted:
type: boolean
description: Whether rule allows or forbids.
conditions:
type: object
properties:
name:
anyOf:
- type: string
- type: object
properties:
$eq:
type: string
minLength: 1
$ne:
type: string
minLength: 1
$glob:
type: string
minLength: 1
$in:
type: array
items:
type: string
minLength: 1
additionalProperties: false
# --- truncated at 32 KB (337 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/infisical/refs/heads/main/openapi/infisical-identity-specific-privileges-v2-api-openapi.yml