Agent Vault projects

Keep each agentic system’s credentials and members in a separate Agent Vault project.

An Agent Vault project holds the credentials and settings that one agentic system or team uses. Each project has its own admins and members, so the people who run one system can’t see or change the credentials of another.

To open a project, select Agent Vault on your organization’s overview, then select the project.

​

Project and organization scope

Each Agent Vault project has its own:

• Members and their project roles
• Access bundles, services, and variables
• Personal variables and personal values, which each member sets up separately in each project
• Skills
• Sessions and proxies (a session only works through a proxy in the same project)
• Session log settings, including where the logs are stored
• Audit logs

If two projects need the same credential, add the credential to each project.

Users and groups belong to your organization, and you add them to each project they need. A machine identity can belong to your organization, or you can create one inside a single project.

Your organization role controls whether you can create projects and whether you can join any project as an admin, while your project role controls what you can do inside a project.

​

Create a project

Create a project for each agentic system or team that should manage its own credentials. For example, if one team runs a support bot and another team runs coding agents, give each team a project. If the same people manage several agents and the agents share credentials, keep the agents in one project.

Organization admins and members can create projects by default.

1. On your organization’s overview, select Agent Vault.

   
2. Select New Project, enter a Project Name, then select Create Project.

   

You become the project’s admin. To give other people access, add them to the project.

​

Join a project

A project admin can add you to the project. If no one has added you, you can request access, or join on your own if you’re an organization admin.

​

Request access

1. On your organization’s overview, select Agent Vault, then select the All Projects tab.

2. On the project’s row, select Request Access.

3. Optionally, enter a Note for the project’s admins, then select Submit Request.

Infisical emails your request to the project’s admins, who can then add you to the project.

​

Join as an organization admin

Organization admins aren’t automatically members of every Agent Vault project. To join a project you aren’t a member of:

1. On your organization’s overview, select Agent Vault, then select the All Projects tab.

2. On the project’s row, select Join as Admin. If you’re already a member through a group, the button is Become Admin.

   

Infisical adds you to the project with the Admin role, records the change in the audit log, and emails the project’s admins.

​

Find the project ID

The API and the Infisical CLI need the ID of the Agent Vault project to work in. To find it, open the project, go to Administration > Settings, and copy the Project ID. The ID is also in the project’s address in your browser, after /projects/agent-vault/.

​

Delete a project

Only an admin of the project can delete it. You can’t undo deleting a project.

1. In the project, go to Administration > Settings.

2. If Delete Protection is on, turn it off.

3. Select Delete followed by the project’s name, type confirm, then select Delete Project.

   

When you delete a project:

• Agents that use the project’s sessions stop getting credentials, and the project’s proxies stop working
• You can no longer view the project’s session logs