> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# API reference

> Programmatically manage resources over HTTPS with the Infisical REST API.

The Infisical API is a REST API served over HTTPS. It supports every action available in the Infisical dashboard: reading and writing secrets, managing projects and machine identities, reading audit logs, and configuring the other resources in an organization.

> [card] [Quickstart](https://infisical.com/docs/api-reference/overview/quickstart.md)
>
> Make your first authenticated request to the Infisical API using Universal Auth.

> [!TIP]
>
> You can also interact with Infisical programmatically using the [CLI](https://infisical.com/docs/cli/overview.md) and [SDKs](https://infisical.com/docs/sdks/overview.md).

## Base URL

If you use Infisical Cloud, all endpoints are available under `https://app.infisical.com/api` (US region) or `https://eu.infisical.com/api` (EU region).

If you self-host Infisical or run a dedicated instance, replace the host with the address of your instance: `https://<your-instance>/api`.

Each endpoint page in this reference lists a path (for example, `/api/v3/secrets/raw`). The full URL for a request is the base URL followed by that path.

> [!NOTE]
>
> **Are you an AI agent reading this page?** Welcome. Skip the scrolling: the complete OpenAPI specification is at `/api/docs/json` on any Infisical instance, for example [app.infisical.com/api/docs/json](https://app.infisical.com/api/docs/json).
>
> The full specification is large, so spare your context window and add the `tag` query parameter to get only the endpoints you need. For example `/api/docs/json?tag=secrets`.

## API versioning

Each endpoint path is versioned independently. When an endpoint changes in a way that breaks existing callers, Infisical adds a new version of that endpoint and leaves the previous version in place. Different endpoints can therefore be on different versions (for example, `/api/v4/secrets` and `/api/v1/secret-syncs`).

For each endpoint, use the highest version listed in this reference.

## OpenAPI

Every running Infisical instance serves its OpenAPI specification at `/api/docs/json` (on Infisical Cloud, `https://app.infisical.com/api/docs/json`). Code generators and client libraries can read the specification from that URL to produce typed clients for any endpoint in this reference.

## Get started

> [card] [Authentication](https://infisical.com/docs/api-reference/overview/authentication.md)
>
> Authenticate as a machine identity and use the returned access token on every request.

> [card] [Pagination](https://infisical.com/docs/api-reference/overview/pagination.md)
>
> Use `offset` and `limit` to read all pages from a paginated endpoint.

> [card] [Rate limiting](https://infisical.com/docs/api-reference/overview/rate-limits.md)
>
> Per-minute rate limits by category, and the format of the HTTP 429 response.

> [card] [Errors](https://infisical.com/docs/api-reference/overview/errors.md)
>
> The format of an error response, the common HTTP status codes, and the `reqId` field.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.