AI Catalog manifest · Infisical

Infisical

Infisical serves an AI Catalog manifest at /.well-known/ard.json on infisical.com, declaring 11 agentic resources that a discovery service can index without asking anyone’s permission.

Open the live manifest → Infisical provider profile

Structural grade · AI Catalog 1.0

Flavored

Fails a hard check in the data model. A catalog in spirit rather than in schema.

ARD conformance-test v0.9.1 (ards-project/ard-spec)

FAIL

Run against this exact body with the project’s own conformance CLI — 7 critical errors.

Discovery path

ard.json

Served at /.well-known/ard.json — the path ARD v0.91 says a consumer MUST fetch.

Declared spec version

none

The specVersion in the manifest. 1.0 is current for the AI Catalog data model; anything lower is an earlier draft. ARD reads this field as transport-defined and ignores it.

⚠ Hard checks failed. An ARD client cannot assume this manifest parses to the model the specification defines.

no-host-object

Optional affordances missing. None of these break a client, but each one costs the publisher search relevance or verifiability.

content-type-not-ai-catalog-json

11 entries

4 media types

31 representative queries

0 trust manifests

Host identifier: none

What this manifest advertises

Infisical MCP server

urn:air:infisical.com:server:mcp

Official MCP server. Runs locally over stdio via `npx -y @infisical/mcp` and authenticates as an Infisical machine identity.

application/mcp-server-card+json artifact →

“read the DATABASE_URL secret from my staging environment”
“add an API key to the production environment of my Infisical project”
“list the projects in my Infisical organization”

Infisical REST API

urn:air:infisical.com:api:rest

OpenAPI 3.0 description of the full Infisical API: secrets, projects, identities, PKI, and PAM. Bearer authentication with a machine identity access token.

application/vnd.oai.openapi+json;version=3.0 artifact →

“which Infisical API endpoint creates a machine identity”
“how do I issue a certificate through the Infisical API”
“what does the Infisical API return when a secret does not exist”

Infisical agent index

urn:air:infisical.com:index:llms-txt

Index of every page on infisical.com available as markdown, with the conventions for requesting it.

text/plain artifact →

“what does Infisical do”
“which Infisical product solves which problem”

Infisical content, in one document

urn:air:infisical.com:index:llms-full

Every page of infisical.com that has a markdown view, concatenated: the whole site in one fetch.

text/markdown artifact →

“give me everything Infisical says about itself”
“what are all of Infisical's products and how do they fit together”

Infisical documentation index

urn:air:infisical.com:index:docs

Index of the full product documentation, each page available as markdown by appending `.md` to its URL.

text/plain artifact →

“how do I install the Infisical CLI”
“how do I configure a Kubernetes operator to inject Infisical secrets”
“how do I set up dynamic secrets for PostgreSQL”

Infisical

urn:air:infisical.com:doc:index

What Infisical is, who it is for, which product solves which problem, pricing, customers, trust posture, and the full integration list.

text/markdown artifact →

“what does Infisical do”
“is Infisical open source and can I self-host it”
“what is the best alternative to HashiCorp Vault”

Infisical for AI agents

urn:air:infisical.com:doc:ai-agents

What the platform does for agents rather than how to install it, covering Agent Proxy for third-party credentials, brokered PAM sessions on your own infrastructure, and agent identity and audit.

text/markdown artifact →

“how do I give an AI agent an API key without letting it see the key”
“how do I stop prompt injection from exfiltrating credentials”
“how do I give an AI agent scoped access to a production database”

Secrets Management

urn:air:infisical.com:doc:platform/secrets-management

Deliver application credentials at runtime instead of from files, and broker them to AI agents with Agent Proxy so the agent never holds the key.

text/markdown artifact →

“how do I stop keeping secrets in .env files”
“how do I fetch secrets at runtime in my application or CI pipeline”
“how do I rotate a database credential automatically”

Certificate Management

urn:air:infisical.com:doc:platform/certificate-management

Run private CAs, issue over ACME, SCEP, and EST, and auto-renew X.509 certificates before they expire.

text/markdown artifact →

“how do I run a private certificate authority”
“how do I stop internal TLS certificates from expiring in production”
“how do I issue certificates over ACME, SCEP, or EST”

Privileged Access

urn:air:infisical.com:doc:platform/pam

Time-bound, approved, recorded sessions on databases and servers, with the credential withheld from the user.

text/markdown artifact →

“how do I give an engineer temporary access to a production database”
“how do I remove standing SSH and database access”
“how do I record and audit privileged sessions”

Pricing

urn:air:infisical.com:doc:pricing

Prices and plan contents for all three product lines, plus which features are gated by tier.

text/markdown artifact →

“how much does Infisical cost”
“does Infisical have a free tier or a trial”
“which Infisical plan includes SSO, dynamic secrets, or audit log streaming”

How it is served

The publishing guide asks for three things at the transport layer, because a crawler is the consumer that matters and a crawler is a browser-shaped client.

HTTPS only — yes (HTTP 200)
Content-Type: application/json — yes
Access-Control-Allow-Origin: * — yes

Evidence. Fetched https://infisical.com/.well-known/ard.json on 2026-09-13, HTTP 200. The verbatim body is stored alongside its manifest in the Infisical repository as ai-catalog/infisical-ai-catalog.json. Nothing on this page is derived or generated: an AI Catalog manifest is served from the publisher’s own domain or it does not exist, which makes it — like an A2A Agent Card — one of the few agent artifacts that cannot be produced on a provider’s behalf. Grades are recomputed on every build; the specification is a v0.9 draft and these verdicts will move when it does.

Work with this as data

Every descriptor here is available over the APIs.io API and to AI agents over MCP. Agent Discovery is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for agent discovery

3 MCP tools reach this

apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

Search the catalog

curl "https://apis.io/api/v1/search?q=infisical&limit=10"

Everything under a tag

curl "https://apis.io/api/v1/tags/infisical"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.