Infisical Public REST API

Create a machine identity in Infisical, then configure an auth method for it. The easiest path documented is Universal Auth: go to Organization Settings → Access Control → Identities, create the identity, keep the issued Client ID and Client Secret, and exchange them at /api/v1/auth/universal-auth/login for a short-lived access token. Infisical also documents Token Auth, where you create an access token directly on the identity and use that token against the API.

In Infisical, open Service Token management at Access Control → Service Tokens and click Create token. Configure the token scopes, permissions, and optional expiration, then copy the created token. The docs note service tokens are prefixed with st, and when authenticating to the API you send only the access-token portion before the last . delimiter.

To let an external platform obtain delegated access to Infisical, register an OAuth application in OAuth Applications: go to Organization Settings → OAuth Applications, click Add OAuth application, enter the redirect URIs, and save the shown Client ID and Client Secret. Infisical acts as the OAuth 2.0 authorization server under /api/v1/oauth; use the standard authorization-code flow from your app.